Cybercriminals are increasingly targeting physical building and operational systems — such as refrigeration units, HVAC controls, and door access systems — to cause real-world disruption and pressure victims into paying ransoms, moving beyond traditional data theft. Building automation systems are particularly attractive targets due to their poor security controls, widespread use of insecure protocols, and lack of network monitoring, with ransomware attacks on industrial organisations rising sharply year on year. Experts warn that AI is lowering the barrier for attackers to exploit obscure OT systems, and that as IT security improves, internet-connected physical infrastructure will increasingly become the next prime target.
