Australia was the most targeted country for IoT and OT cyberattacks in Nozomi Networks Labs' latest threat intelligence report, up from third place in the previous edition.

Threat actors Nozomi also examined activity attributed to threat actors.

Scattered Spider's prominence also underscores the role of social engineering in attacks on industrial and connected environments.

The repeated use of these basic methods suggests that many connected industrial and IoT environments remain exposed through longstanding weaknesses rather than highly specialised intrusion techniques.

It also urged defenders to focus on the behaviours and indicators left by threat actors and to keep detection logic updated as new intelligence emerges.