#IOControl
Water utilities lose their MicroLogix PLCs as attackers rewrite IPs and passwords. https://intel.threadlinqs.com/threat/TL-2026-4339?utm_source=bluesky #ThreatIntel #CVE_2017_16740 #CVE_2021_22681 #IOCONTROL
October 24, 2026 at 4:02 AM
Exposed PLCs are being locked out and rewritten - 30+ water utilities hit while Volt Typhoon waits inside. https://intel.threadlinqs.com/threat/TL-2026-2961 #ThreatIntel #CVE_2021_22681 #KVBotnet #IOControl
October 6, 2026 at 12:49 PM
NCSC: nation-states are hacking Britain's power, water, and factories via legacy PLCs. https://intel.threadlinqs.com/threat/TL-2026-2239 #ThreatIntel #CVE_2021_22681 #IOCONTROL #Cyclops
August 30, 2026 at 5:16 PM
AI-generated Snap7 scripts target exposed Siemens PLCs across 7 US critical infrastructure sectors. https://intel.threadlinqs.com/threat/TL-2026-2076 #ThreatIntel #CVE_2026_51218 #CVE_2026_15105 #IOCONTROL
August 20, 2026 at 3:29 AM
Notícia da SecurityOnline

"Malware IOCONTROL: A Arma de Escolha dos CyberAv3ngers Mira Infraestrutura Crítica" #bolhasec
IOCONTROL Malware: CyberAv3ngers’ Weapon of Choice Targets Critical Infrastructure
A sophisticated malware strain dubbed “IOCONTROL” has emerged as a significant threat to industrial control systems (ICS) and Internet of Things (IoT) devices, particularly in Israel and the United States.... The post IOCONTROL Malware: CyberAv3ngers’ Weapon of Choice Targets Critical Infrastructure appeared first on Cybersecurity News.
securityonline.info
December 15, 2024 at 8:46 AM
Notícia da SecurityWeek

"Hackers Iranianos Usam Malware IOCONTROL para Alvo de Dispositivos OT e IoT nos EUA e Israel" #bolhasec
Iranian Hackers Use IOCONTROL Malware to Target OT, IoT Devices in US, Israel
The Iranian threat group CyberAv3ngers has used custom-built malware named IOCONTROL to target IoT and OT devices in the US and Israel. The post Iranian Hackers Use IOCONTROL Malware to Target OT, IoT Devices in US, Israel appeared first on SecurityWeek.
www.securityweek.com
December 13, 2024 at 12:47 PM
Notícia da BleepingComputer

"Novo malware IOCONTROL utilizado em ataques a infraestruturas críticas" #bolhasec
New IOCONTROL malware used in critical infrastructure attacks
Iranian threat actors are utilizing a new malware named IOCONTROL to compromise Internet of Things (IoT) devices and OT/SCADA systems used by critical infrastructure in Israel and the United States. [...]
www.bleepingcomputer.com
December 12, 2024 at 9:30 PM
Iran-linked malware, IOCONTROL, attacks US & Israeli critical infrastructure. #Cybersecurity #IranThreat #CriticalInfrastructure
IOCONTROL Malware Targets US, Israel Infrastructure
Iran-linked malware, IOCONTROL, attacks US & Israeli critical infrastructure. #Cybersecurity #IranThreat #CriticalInfrastructure
securityonline.info
December 16, 2024 at 4:07 AM
Iranian hackers, CyberAv3ngers, target critical infrastructure (water, gas, oil). Masquerading as hacktivists, their escalating attacks (IOControl malware) earned a $10M US bounty.#CyberAv3ngersThreat
April 14, 2025 at 2:02 PM
米国務省は、重要インフラを狙うマルウェアIOControlを使用したイラン系ハッカーに関する情報に、最大1,000万ドルの報奨金を提供すると発表した。イランのIRGC-CECと関連があるとみられるグループが標的。 therecord.media/us-offers-re...
US offering $10 million for info on Iranian hackers behind IOControl malware
The U.S. State Department said it is looking for information on hackers linked to Iran's Islamic Revolutionary Guard Corps.
therecord.media
June 16, 2025 at 10:30 PM
Les États-Unis offrent 10 millions de dollars pour l’opérateur iranien du malware IOControl
Les États-Unis offrent 10 millions de dollars pour l’opérateur iranien du malware IOControl - INCYBER NEWS
Ce membre de CyberAv3ngers, un groupe cybercriminel lié à Téhéran, a mené plusieurs attaques contre les dispositifs SCADA/ICS d’infrastructures critiques américaines et israéliennes.
incyber.org
June 18, 2025 at 10:17 AM
The malware's modular nature makes it capable of compromising a broad spectrum of devices from various manufacturers, including D-Link, Hikvision, Baicells, Red Lion, Orpak, Phoenix Contact, Teltonika, and Unitronics. www.bleepingcomputer.com/news/securit...
New IOCONTROL malware used in critical infrastructure attacks
Iranian threat actors are utilizing a new malware named IOCONTROL to compromise Internet of Things (IoT) devices and OT/SCADA systems used by critical infrastructure in Israel and the United States.
www.bleepingcomputer.com
December 13, 2024 at 1:59 PM
-New Antidot trojan version
-New Iranian industrial malware discovered (IOCONTROL)
-Socks55Systemz malware behind proxy[.]am service
-New Glutton backdoor found on PHP sites
-New UAC-0185 activity targets Ukraine's defense contractors
-China expands its propaganda machine with 100 new ICCs
December 11, 2024 at 9:43 AM
"Team82 obtained a sample of a custom-built IoT/OT malware called IOCONTROL used by the Iran-affiliated attackers to attack Israel- and U.S.-based OT/IoT devices."

claroty.com/team82/resea...
December 10, 2024 at 7:30 PM
Iran-linked hackers compromised US water/energy PLCs per FBI/NSA/CISA advisory. CyberAv3ngers previously breached 100+ Unitronics devices; IOControl malware for persistence. Asymmetric cyber warfare: when conventional force fails, code becomes weapon. #CyberWarfare #CriticalInfrastructure
Iran-Linked Hackers Are Sabotaging US Energy and Water Infrastructure
As Trump threatens Iranian infrastructure, the US government warns that Iran has carried out its own digital attacks against US critical infrastructure.
www.wired.com
April 11, 2026 at 6:06 PM
I talked to Noam Moshe of @claroty.bsky.social #Team82 about the #IOCONTROL backdoor used by an Iranian APT against civilian critical infrastructure in the U.S. and Israel.
Listen to it here 🎙️
nexusconnect.io/podcasts/nex...
Nexus Podcast: Noam Moshe on the IOCONTROL Malware
On this episode of the Nexus Podcast, Team82 researcher Noam Moshe provides some technical details on the IOCONTROL malware, a Linux-based backdoor used to infect critical infrastructure around the wo...
nexusconnect.io
January 9, 2025 at 6:10 PM
🎙️ New @claroty.bsky.social Nexus podcast with Noam Moshe of Team82 on #IOCONTROL. Noam's awesome. You should listen to Noam.
nexusconnect.io/podcasts/nex...
Nexus Podcast: Noam Moshe on the IOCONTROL Malware
On this episode of the Nexus Podcast, Team82 researcher Noam Moshe provides some technical details on the IOCONTROL malware, a Linux-based backdoor used to infect critical infrastructure around the wo...
nexusconnect.io
December 23, 2024 at 2:31 PM