1、 Threat landscape for industrial automation systems Q2Q2 2022025 5 11.09.2025 Version 1.0 THREAT LANDSCAPE FOR INDUSTRIAL AUTOMATION SYSTEMS Q2 2025 2 2025 AO KASPERSKY LAB Q2 in numbers.3 Statistics across all threats.4 Selected industries.7 Diversity of detected malicious objects.9 Threat categori

2、es.11 Malicious objects used for initial infection.11 Denylisted internet resources.11 Malicious documents(MSOffice+PDF).14 Malicious scripts and phishing pages(JS and HTML).17 Next-stage malware.19 Spyware.19 Ransomware.21 Miners in the form of executable files for Windows.23 Web miners.27 Self-pro

3、pagating malware.Worms and viruses.29 Worms.29 Viruses.32 AutoCAD malware.34 Main threat sources.36 Internet.36 Email clients.39 Removable media.42 Network folders.44 Methodology used to prepare statistics.47 THREAT LANDSCAPE FOR INDUSTRIAL AUTOMATION SYSTEMS Q2 2025 3 2025 AO KASPERSKY LAB Q2 in nu

4、mbers ParameterParameter Q1Q1 20252025 Q2Q2 20252025 Quarterly Quarterly changeschanges Global percentage of attacked ICS computers 21.9%20.5%1.4 pp Percentage of ICS computers on which malicious objects Percentage of ICS computers on which malicious objects from different categories were blockedfro

5、m different categories were blocked Malicious scripts and phishing pages(JS and HTML)7.16%6.49%0.67 pp Denylisted internet resources 5.12%5.91%0.79 pp Spy Trojans,backdoors and keyloggers 4.20%3.84%0.36 pp Malicious documents (MSOffice+PDF)1.85%1.97%0.12 pp Viruses 1.53%1.29%0.24 pp Worms 1.31%1.22%

6、0.09 pp Miners in the form of executable files for Windows 0.78%0.63%0.15 pp Web miners running in browsers 0.53%0.30%0.23 pp Malware for AutoCAD 0.34%0.29%0.05 pp Ransomware 0.16%0.14%0.02 pp Main threat sourcesMain threat sources Internet 10.11%9.76%0.35 pp Email clients 2.81%3.06%0.25 pp Removabl