Yesterday, Kaspersky ICS CERT released a report on advanced cyber threat groups they track targeting industrial organizations. While APT attacks do not represent the bulk of cyber threat activity against our industrial organizations, they do represent the highest consequence if successful. However, not all APT groups have advanced tradecraft with the capability to disrupt or destroy industrial assets. In other words, just because a group has targeted industrial organizations, does not mean they have advanced capabilities beyond IT-based network actions. Many threat groups that focus on industrial organizations thus far have only demonstrated the capability for IT network reconnaissance and not disruptive attacks against ICS components or processes. Kaspersky’s summary describes the main events of 2020 associated with seventeen APT attack groups. To learn more about the industrial-focused APT groups, visit Kaspersky ICS CERT.