Dragos believes that adversaries pose a threat to European industrial infrastructure for the following reasons:

• Increasing regional tensions are likely to result in industrial operations impact from criminal and other adversaries. Particularly of concern are geographically dispersed industrial operations such as renewable electric generation, electric transmission, upstream and midstream oil and gas, water and wastewater management, etc.
• The increase in ransomware attacks, especially those targeting small- to medium-sized manufacturing entities
• The continued development of Activity Group (AG) techniques, tactics, and procedures (TTPs)
• The high interdependence, yet independently managed and operated, nature of industrial operations across Europe presents a unique regional systematic risk