1、 Threat landscape for industrial automation systems Q3 2025 11.12.2025 Version 1.0 THREAT LANDSCAPE FOR INDUSTRIAL AUTOMATION SYSTEMS Q3 2025 2 2025 AO KASPERSKY LAB Q3 in numbers.3 Changes over the quarter.4 Statistics across all threats.8 Selected industries.11 Diversity of detected malicious obje

2、cts.13 Threat categories.15 Malicious objects used for initial infection.15 Denylisted internet resources.15 Malicious documents(MSOffice+PDF).18 Malicious scripts and phishing pages(JS and HTML).20 Next-stage malware.23 Spyware.23 Ransomware.26 Miners in the form of executable files for Windows.28

3、Web miners.32 Self-propagating malware.Worms and viruses.34 Worms.35 Viruses.37 AutoCAD malware.40 Main threat sources.43 Internet.43 Email clients.46 Removable media.48 Network folders.51 Methodology used to prepare statistics.53 THREAT LANDSCAPE FOR INDUSTRIAL AUTOMATION SYSTEMS Q3 2025 3 2025 AO

4、KASPERSKY LAB Q3 in numbers Parameter Q2 2025 Q3 2025 Quarterly changes Global percentage of attacked ICS computers 20.5%20.1%0.4 pp Percentage of ICS computers on which malicious objects from different categories were blocked Malicious scripts and phishing pages(JS and HTML)6.49%6.79%0.30 pp Spy Tr

5、ojans,backdoors and keyloggers 3.84%4.04%0.20 pp Denylisted internet resources 5.91%4.01%1.90 pp Malicious documents(MSOffice+PDF)1.97%1.98%0.01 pp Viruses 1.29%1.40%0.11 pp Worms 1.22%1.26%0.04 pp Miners in the form of executable files for Windows 0.63%0.57%0.06 pp Malware for AutoCAD 0.29%0.30%0.0

6、1 pp Web miners running in browsers 0.30%0.25%0.05 pp Ransomware 0.14%0.17%0.03 pp Main threat sources Internet 9.76%7.99%1.77 pp Email clients 3.06%3.01%0.05 pp Removable media 0.37%0.33%0.04 pp Network folders 0.05%0.04%0.01 pp THREAT LANDSCAPE FOR INDUSTRIAL AUTOMATION SYSTEMS Q3 2025 4 2025 AO K