Kaspersky卡巴斯基：2025年第四季度工业自动化系统威胁landscape报告（英文版）

The main categories of threats from email clients blocked on ICS computers are malicious scripts and phishing pages, spyware, and malicious documents. In Q4 2025, the percentage of ICS computers on which worms in email attachments were blocked doubled as a result of an increase in the number of phishing attacks aimed at delivering Backdoor.MSIL.XWorm. Over the past three years, the percentage of ICS computers on which threats from removable media were blocked has steadily decreased. Compared