Rise in Ransomware Attacks Targeting Industrial Operations
Summary
Hide ▲
Show ▼
A significant increase in ransomware attacks targeting industrial organizations has been observed, with 119 groups identified in 2025, a 49% rise from 2024. These attacks exploited vulnerabilities in operational technology (OT) and industrial control systems (ICS), affecting 3300 industrial organizations globally. The manufacturing sector was the most targeted, followed by transportation, oil and gas, electricity, and communications. Attackers commonly abused legitimate login credentials obtained through phishing, infostealer malware, or dark web purchases to compromise networks and deploy ransomware. The average dwell time for ransomware in OT environments was 42 days, causing operational disruptions and multi-day outages. Three new threat groups—Sylvanite, Azurite, and Pyroxene—were identified, each with distinct tactics targeting industrial systems.
Timeline
-
17.02.2026 14:50 1 articles · 10h ago
Ransomware Attacks on Industrial Operations Increase Significantly in 2025
In 2025, 119 ransomware groups targeted industrial organizations, a 49% increase from 2024. These attacks affected 3300 industrial organizations globally, with the manufacturing sector being the most targeted. Attackers exploited legitimate login credentials obtained through phishing, infostealer malware, or dark web purchases to compromise networks and deploy ransomware. The average dwell time for ransomware in OT environments was 42 days, causing operational disruptions and multi-day outages. Three new threat groups—Sylvanite, Azurite, and Pyroxene—were identified, each with distinct tactics targeting industrial systems.
Show sources
- Significant Rise in Ransomware Attacks Targeting Industrial Operations — www.infosecurity-magazine.com — 17.02.2026 14:50
Information Snippets
-
119 ransomware groups targeted industrial organizations in 2025, up 49% from 80 groups in 2024.
First reported: 17.02.2026 14:501 source, 1 articleShow sources
- Significant Rise in Ransomware Attacks Targeting Industrial Operations — www.infosecurity-magazine.com — 17.02.2026 14:50
-
3300 industrial organizations were hit by ransomware in 2025, compared to 1693 in 2024.
First reported: 17.02.2026 14:501 source, 1 articleShow sources
- Significant Rise in Ransomware Attacks Targeting Industrial Operations — www.infosecurity-magazine.com — 17.02.2026 14:50
-
The manufacturing sector was the most targeted, followed by transportation, oil and gas, electricity, and communications.
First reported: 17.02.2026 14:501 source, 1 articleShow sources
- Significant Rise in Ransomware Attacks Targeting Industrial Operations — www.infosecurity-magazine.com — 17.02.2026 14:50
-
Attackers commonly used legitimate login credentials obtained via phishing, infostealer malware, or dark web purchases.
First reported: 17.02.2026 14:501 source, 1 articleShow sources
- Significant Rise in Ransomware Attacks Targeting Industrial Operations — www.infosecurity-magazine.com — 17.02.2026 14:50
-
The average dwell time for ransomware in OT environments was 42 days.
First reported: 17.02.2026 14:501 source, 1 articleShow sources
- Significant Rise in Ransomware Attacks Targeting Industrial Operations — www.infosecurity-magazine.com — 17.02.2026 14:50
-
Three new threat groups—Sylvanite, Azurite, and Pyroxene—were identified, each with distinct tactics targeting industrial systems.
First reported: 17.02.2026 14:501 source, 1 articleShow sources
- Significant Rise in Ransomware Attacks Targeting Industrial Operations — www.infosecurity-magazine.com — 17.02.2026 14:50