Manufacturing — Cyber Threat Activity
Threat actors, incidents and malware targeting the Manufacturing sector — 1,972 recorded incidents and 164 tracked groups.
- Recorded incidents: 1,972
- Incidents, trailing 180 days: 604
- Tracked threat actors: 164
- Malware families: 135
Recent incidents
- Namyang Industrial Co., Ltd. \ NAMYANG NEXMO 2026-08-06
- RS Automation Co., Ltd. 2026-08-06
- Ruhrpumpen 2026-08-05
- Genesis Engineering Group 2026-08-05
- Mayco International 2026-08-05
- Sutherland Packaging 2026-08-05
- Leviton 2026-08-05
- Powerweave 2026-08-05
- Rocky Mount Recyclers 2026-08-05
- STADLER Sensorik CNC-Technik 2026-08-05
- briggsplc.com 2026-08-05
- bridgestoneamericas.com 2026-08-05
- daubertchemical.com 2026-08-05
- Nitrex Chemicals India 2026-08-05
- Mera Metal 2026-08-05
- P. A. Inc. (Performance Alloys) 2026-08-05
- https://geleximco.vn/ 2026-08-04
- GILDE Handwerk Macrander GmbH & Co. KG 2026-08-04
- US Installation Group, Inc. 2026-08-04
- University SprinklerSystems 2026-08-04
Threat actors targeting Manufacturing
- Akira 273 incidents
- Qilin 260 incidents
- Play Ransomware 196 incidents
- LockBit 107 incidents
- RansomHub 107 incidents
- DragonForce 84 incidents
- The Gentlemen 75 incidents
- INC Ransom 72 incidents
- Lynx Ransomware 66 incidents
- SafePay 57 incidents
- Cl0p 51 incidents
- Black Basta 44 incidents
- Hunters International 42 incidents
- 8Base 36 incidents
- Medusa Ransomware 35 incidents
- Cactus 33 incidents
- NightSpire 29 incidents
- Sarcoma 27 incidents
- Fog Ransomware 22 incidents
- BlackSuit 19 incidents
- Rhysida 18 incidents
- Deadlock 17 incidents
- Meow 17 incidents
- RansomHouse 16 incidents
Where these victims are
- United States 882
- Germany 138
- Canada 98
- United Kingdom 74
- Italy 63
- India 54
- Japan 46
- Brazil 35
- France 35
- Spain 34
- Turkey 29
- Sweden 26
Malware used against Manufacturing
Families used by the threat actors that target this sector, derived from actor tooling rather than observed in these incidents directly.
- Agent Tesla Malware
- Akira Malware
- Cobalt Strike Malware
- Impacket Tool
- Mimikatz Tool
- PlugX Malware
- PsExec Tool
- QakBot Malware
- REvil Malware
- Sliver Tool
- AdFind Tool
- AsyncRAT Tool
Coverage. 76.7% of incidents in our log carry a sector classification; the remainder name a victim we have not placed in an industry. Counts here are a floor, not a total, and are not comparable between sectors of different sizes.