Threat landscape for industrial automation systems

This report presents the H1 2020 threat landscape for industrial automation systems (ICS), detailing high-profile incidents and campaigns (BlueScope, WildPressure, PoetRAT, Snake and other ransomware such as Picanol, Ragnar Locker, DESMI, Toll Group, Sodinokibi, Lion, Stadler, and EDP), shifts toward more targeted threats, and evolving attack vectors (RDP brute-force, email, removable media). It also provides global statistics, regional distributions, and threat-source analysis to contextualize current risks to ICS and related corporate networks.