Skip to main content
Industrial Cybersecurity in the Industry

87% of oil and gas senior executives reported being affected by cyber incidents in the last 12 months.

As threats to oil and gas security become more frequent and sophisticated, holistically protect the full spectrum of operations and defend your critical infrastructure with the world’s most robust ICS cybersecurity technology and the largest team of ICS practitioners who built it.
Case Study

Combating threats in oil and gas environments with the Dragos Platform.

In 2018, a large North American oil refinery suspected that its industrial control systems environment had XENOTIME-related activity, a previously-known activity group behind the 2017 TRISIS attack on a Middle Eastern oil and gas refinery. Dragos stepped in to help rapidly identify malicious behavior on their networks and respond before a significant compromise.

Visualize, Detect, and Respond to Threats against Your Oil and Gas Infrastructure

Protect your assets and respond to threats upstream, midstream, and downstream — all in one place.

The Dragos Platform provides ICS defenders with unprecedented visibility of their assets and communications, knowledge of threats through intelligence-driven analytics, and prescriptive guidance via playbooks to investigate and respond to incidents.


Gain in-depth visibility of threats oil and gas networks face.

Make global situational awareness part of your comprehensive security strategy with Dragos ICS Threat Intelligence. Receive pertinent reports via email or our online portal, and participate in live quarterly webinars with our deeply experienced team of ICS/OT intel analysts.


Combat oil and gas cyber threats from all angles.

Dragos’ experienced Professional Services team can be dispatched to perform a variety of activities that allow you to fully understand your ICS environment, mitigate risks, and respond to threats confidently. Instructor-led ICS training classes are also available year-round.


Where Dragos differentiates from many [competitors] is in the ICS-focused expertise of its team, reflected in its intelligence-centric approach, where its deep and detailed knowledge of the specifics of the ICS threat landscape are borne out of experience.

451 Research

Known Activity Groups Targeting

The oil and gas industry is a prime target for adversaries seeking to exploit industrial control systems environments. An attack can happen at any point across the major stages of operations. To help protect your infrastructure, Dragos tracks six activity groups specifically targeting oil and gas and will continue to update this list as more information becomes available.

Xenotime logo
since 2014
Focused on physical destruction and long-term persistence
dymalloy logo
since 2016
Deep ICS environment information gathering, operator credentials, industrial process details
Magnallium logo
since 2017
IT network limited, information gathering against industrial orgs
hexane logo
since 2018
IT compromise and information gathering against ICS entities
Parisite logo
since 2017
VPN compromise of IT networks to conduct reconnaissance
Chrysene logo
since 2017
IT compromise, information gathering and recon against industrial orgs

Cyber threats don't wait _


Join us on the frontlines with the latest webinars and events.

Dragos Industrial Security Conference (DISC)
Thu. Nov 5
Register Now