The LC experts concluded that the main source

[relemedf5w023]

According to the LK data, for 22% of infected industrial automation systems, the source of infection was the Internet, and 11% were infected via USB ports. Infections of APCS also occur from backup copies and even through public cloud data storage. All this indicates either the absence of appropriate information security policies or their failure to be implemented.

of threats to industrial enterprises is not software used sri lanka whatsapp data for APCS, but software for other purposes, often not of primary importance for enterprises or even completely unjustifiably installed on computers of service personnel.

About 16% of industrial facility infections are caused by botnets organized to attack financial institutions, to conduct DDoS attacks, to send spam, and for other purposes, but not at all for specialized attacks on ICS. This indicates the versatility and wide range of functionality of bot agents operating today, which complicates the protection of ICS.

At the same time, LK notes an increase in the number of targeted attacks on industrial enterprises. This is linked to the fact that criminals have begun to develop and master schemes for monetizing the consequences of such attacks. They use fake partner bank accounts, extortion and other methods. It is noted that it takes only a few hours for attackers to organize the least complex targeted attacks. It is clear that these will not be attacks of the complexity level of Stuxnet, but they can nevertheless cause damage.