Threat landscape for industrial automation systems. H1 2020 highlights
Over-all downward development for percentages of attacked personal computers globally
Beginning in H2 2019 we have noticed a inclination for decreases in the percentages of attacked computers, each in the ICS and in the company and own environments.
- In H1 2020 the proportion of ICS computers on which destructive objects had been blocked has diminished by 6.6 share factors to 32.6%.
- The quantity was best in Algeria (58.1%), and lowest in Switzerland (12.7%).
- Irrespective of the over-all inclination for the percentages of attacked pcs to reduce, we did see the range improve in the Oil & Gas sector by 1.6 p.p. to 37.8% and by 1.9 p.p. to 39.9 % for personal computers applied in creating automation programs. These numbers are greater than the percentages around the entire world overall.
!functionality(e,i,n,s)var t=”InfogramEmbeds”,d=e.getElementsByTagName(“script”)[0]if(window[t]&&window[t].initialized)window[t].procedure&&window[t].method()else if(!e.getElementById(n))var o=e.createElement(“script”)o.async=1,o.id=n,o.src=”https://e.infogram.com/js/dist/embed-loader-min.js”,d.parentNode.insertBefore(o,d)(doc,,”infogram-async”)
Proportion of ICS pcs on which destructive objects have been blocked (download)
Wide variety of malware
Threats are turning into much more specific and extra centered, and as a end result, much more varied and elaborate.
- Kaspersky solutions in ICS environments blocked above 19.7 thousand malware modifications from 4,119 various families.
- We are seeing significantly much more households of backdoors, spyware, Gain32 exploits and malware built on the .Web platform.
- Ransomware was blocked on .63% of ICS desktops. This is quite very similar to the total of .61% in H2 2019.
Primary menace resources
The world wide web, removable media and e-mail go on to be the main resources of threats in the ICS natural environment. Predictably, the percentages in the rankings for these threats have reduced.
- World wide web threats had been blocked on 16.7% of ICS computers (-6.4 p.p.).
- Threats penetrating when removable media are connected ended up blocked on 5.8% of pcs (-1.9 p.p.).
- Malicious email attachments ended up blocked on 3.4% of ICS personal computers (-1.1 p.p.).
!perform(e,i,n,s)var t=”InfogramEmbeds”,d=e.getElementsByTagName(“script”)[0]if(window[t]&&window[t].initialized)window[t].approach&&window[t].system()else if(!e.getElementById(n))var o=e.createElement(“script”)o.async=1,o.id=n,o.src=”https://e.infogram.com/js/dist/embed-loader-min.js”,d.parentNode.insertBefore(o,d)(document,,”infogram-async”)
Most important sources of threats blocked on ICS computer systems* (download)
* share of ICS computer systems on which malicious objects from distinct resources ended up blocked
Regional differences
Asia and Africa were being the least protected.
- Asian locations occupy 4 out of the Best 5 positions in the regional rankings based on the proportion of ICS personal computers which were attacked. Africa comes second.
- Southeast Asia is the worst strike – it prospects in a number of rankings:
- Percentage of ICS desktops where malicious activity was blocked – 49.8%.
- percentage of ICS computer systems the place net threats were being blocked – 14.9%.
- Percentage of ICS computers where by malicious email attachments had been blocked – 5.8%.
- Africa sales opportunities in the rating of locations by proportion of ICS personal computers exactly where malicious action was blocked when detachable media were being linked with (14.9%).
The situation is very best in Australia, Europe, United states of america and Canada, which are in at the base in all of the rankings except by destructive electronic mail attachments.
- Northern Europe is the most protected area with the most affordable positions in rankings in H1 2020:
- by share of ICS desktops attacked – 10.1%,
- by proportion of ICS computer systems on which internet threats ended up blocked – 4.6%,
- By proportion of ICS desktops the place destructive e-mail attachments have been blocked (1.1%).
- The least expensive proportion of ICS pcs on which threats were blocked when removable media had been related was in Australia – .8%. Northern Europe arrived in with a close next of .9%.
- In Australia, Europe, United states of america and Canada the percentages in the rankings by destructive e mail attachments were bigger than by threats on removable media with Jap Europe as the exception – 3.5% and 3.7% respectively.
Southern and Japanese Europe have been the least safe areas in Europe.
- Southern and Eastern Europe were in the Top 5 of the rankings by percentages of ICS pcs the place malicious e-mail attachments were being blocked. Southern Europe came in second with 5.2% and Eastern Europe fifth with 3.5%.
- Japanese Europe was the only location in the globe exactly where we noticed an maximize of .9 p.p. in the proportion of personal computers the place threats were being blocked when detachable media ended up related, coming in with 3.7%.