1、 Threat landscape for industrial automation systems Q1 2025 15.05.2025 Version 1.0 THREAT LANDSCAPE FOR INDUSTRIAL AUTOMATION SYSTEMS Q1 2025 2 2025 AO KASPERSKY LAB Q1 in numbers.3 Trends.4 Statistics across all threats.8 Selected industries.10 Diversity of detected malicious objects.12 Threat cate

2、gories.14 Malicious objects used for initial infection.14 Denylisted internet resources.14 Malicious documents(MSOffice+PDF).17 Malicious scripts and phishing pages(JS and HTML).20 Next-stage malware.23 Spyware.23 Ransomware.26 Miners in the form of executable files for Windows.28 Web miners.31 Self

3、-propagating malware.Worms and viruses.33 Worms.34 Viruses.36 AutoCAD malware.38 Main threat sources.40 Internet.42 Email clients.44 Removable media.46 Network folders.48 Methodology used to prepare statistics.50 THREAT LANDSCAPE FOR INDUSTRIAL AUTOMATION SYSTEMS Q1 2025 3 2025 AO KASPERSKY LAB Q1 i

4、n numbers ParameterParameter Q4Q4 20242024 Q1Q1 20252025 Quarterly Quarterly changeschanges Global percentage of attacked ICS computers 21.9%21.9%0 pp Percentage of ICS computers on which malicious objects Percentage of ICS computers on which malicious objects from different categories were blockedf

5、rom different categories were blocked Malicious scripts and phishing pages(JS and HTML)7.11%7.16%0.05 pp Denylisted internet resources 5.52%5.12%0.40 pp Spy Trojans,backdoors and keyloggers 4.30%4.20%0.10 pp Malicious documents (MSOffice+PDF)1.71%1.85%0.14 pp Viruses 1.61%1.53%0.08 pp Worms 1.37%1.3

6、1%0.06 pp Miners in the form of executable files for Windows 0.70%0.78%0.08 pp Web miners running in browsers 0.39%0.53%0.14 pp Malware for AutoCAD 0.38%0.34%0.04 pp Ransomware 0.21%0.16%0.05 pp Main threat sources Main threat sources Internet 9.98%10.11%0.13 pp Email clients 2.72%2.81%0.09 pp Remov