Article

In 2025, Dragos identified three new threat groups targeting industrial control systems (ICS) and operational technology (OT): Sylvanite, Azurite, and Pyroxene. These groups exploit vulnerabilities and steal sensitive operational data from various sectors globally, including the US, Taiwan, and Europe.

Sylvanite acts as a broker for the group Voltzite, while Azurite has connections to multiple other threat groups and targets critical infrastructure. Pyroxene specializes in cross-domain access, using social engineering and wiper malware to disrupt operations.