Your first line of defense against adversaries

Dragos collects and analyzes information on cyber intrusions and attempts to compromise ICS networks

We create profiles of known groups targeting ICS environments so we can focus on how they operate

Finally, we establish robust analytics with comprehensive data around actions, capabilities, and intentions

Learn how to properly leverage the Diamond Model for Intrusion Analysis to stop incidents and categorize threat activity.

Watch Webinar

Threat Groups We’re Tracking

The Threat Group reports below are compiled by our expert practitioners to provide awareness about your threat landscape and evolving threats, so you can create defensive plans to protect your ICS environments.

CHERNOVITE

since 2021

CHERNOVITE has the capability to disrupt, degrade, and potentially destroy industrial environments and physical processes in industrial environments.

TALONITE

since 2019

Focused on physical destruction and long-term persistence

KAMACITE

since 2014

Known to facilitate operations leading to disruptive ICS attack

VANADINITE

since 2019

IT compromise and information gathering

XENOTIME

since 2014

Focused on physical destruction and long-term persistence

DYMALLOY

since 2016

Deep ICS environment information gathering, operator credentials, industrial process details

MAGNALLIUM

since 2017

IT network limited, information gathering against industrial orgs

HEXANE

since 2018

IT compromise and information gathering against ICS entities

PARISITE

since 2017

VPN compromise of IT networks to conduct reconnaissance

CHRYSENE

since 2017

IT compromise, information gathering and recon against industrial orgs

Want more in-depth visibility of adversaries, vulnerabilities and threats? Full reports detailing the tactics, techniques, and procedures (TTP) and Dragos’ research is available to our Threat Intelligence subscribers. Request a free 30-day trial today.

View Threat Intelligence

Dragos

What goes into tracking the world’s top Industrial Threat Groups?