Data Analysis and Results of Threat Groups in OT Environment

We gathered data from these notable sources such as Threat Group Cards by ThaiCERT, Malpedia by Fraunhofer FKIE, MITRE ATTCK, and the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) and compiled publicly available information, including:

News articles and threat reports, based on categories such as victim sector (targeted companies)

Threat actor group (responsible for the attack)

Number of publicly reported attacks until June 2023

Year of threat group discovery

Infrastructure target component (ISA- 95 model level targeted by attackers)

Source country of the threat

Victim countries of the threat

Motivation behind the attack

Tools used for the attack

Tool type employed in the attack

From these sources, we compiled information on 120 threat groups targeting OT/ICS environments in industrial sectors such as manufacturing, energy, oil gas, industrial, petrochemical, and critical infrastructure.