TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Kaspersky Securelist

Threat landscape for industrial automation systems in Q4 2025

Kaspersky ICS CERT · 2026-04-15 · Read original ↗

ATT&CK techniques detected

2 predictions
T1204.002Malicious File
57%
"related to the worm backdoor. msil. xworm. this malware is designed to persist on the system and then remotely control it. interestingly, this threat was not detected on ics computers in the previous quarter, yet it appeared in all regions in q4 2025. a study found that the activ…"
T1566.001Spearphishing Attachment
56%
"related to the worm backdoor. msil. xworm. this malware is designed to persist on the system and then remotely control it. interestingly, this threat was not detected on ics computers in the previous quarter, yet it appeared in all regions in q4 2025. a study found that the activ…"

Summary

The report contains industrial threat statistics for Q4 2025. It covers various infection vectors and malware types, as well as regional statistics and statistics by industry.