The threats to OT operators continue to grow, criminal groups are targeting operators of assets for monetary gain, but state sponsored actors continue to develop their capabilities. Each time developing a greater understanding of their target systems. We will dive into the malware, the targets and applications of this malware and describe how an understanding of these can aid mitigation.