“Blocked denylisted internet resources, and malicious scripts and phishing pages were the biggest contributors to this increase in the historically safer regions,” Kaspersky explained.
Denylisted internet resources can include email addresses sending spam, malicious websites, and potentially malicious apps that the user is trying to download.
Denylisted internet resources was the only category that saw growth in the first half of the year.
“The percentage of ICS computers on which threats in this category are blocked has grown for the second half-year in a row,” Kaspersky noted in its report, adding, “Until 2022, denylisted internet resources had topped the list of threat categories, but in 2022, they took second place to malicious scripts and phishing pages, which still remain at the top of the list. Yet, the values for these two types of threats were converging.”
| Learn
More at SecurityWeek’s ICS
Cyber Security Conference The leading global conference series for Operations, Control Systems and OT/IT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity. October 23-26, 2023 | Atlanta www.icscybersecurityconference.com |
Related: Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations
Related: Engineering Workstations Used as Initial Access Vector in Many ICS/OT Attacks: Survey

