Multistate Water System Attacks Widen, Iran Suspected

A coordinated campaign targeting water and wastewater systems across multiple states is underway, potentially linked to Iran and the CyberAv3ngers hacktivist group. Threat actors are exploiting poorly secured PLCs – industrial controllers – by modifying passwords and disconnecting them from the internet. While there’s been no disruption to water supplies so far, the attacks are intended to create fear and highlight vulnerabilities within the sector. The attacks are characterized by a lack of sophistication, but the scale suggests a well-organized adversary with a clear objective: widespread disruption.