shahid kaveh is the unit behind the cyberav3ngers persona, which claimed the 2023 unitronics controller attacks on us water utilities. it also operates as soldiers of solomon, mr. soul, and cyber isnaad front.
November 10, 2026 at 12:51 PM
shahid kaveh is the unit behind the cyberav3ngers persona, which claimed the 2023 unitronics controller attacks on us water utilities. it also operates as soldiers of solomon, mr. soul, and cyber isnaad front.
the lead name is cyberav3ngers (aka shahid kaveh group), an actor the agencies tie to the irgc's cyber-electronic command. in november 2023 it hit multiple us water and wastewater facilities running israeli-made unitronics controllers.
November 9, 2026 at 12:22 PM
the lead name is cyberav3ngers (aka shahid kaveh group), an actor the agencies tie to the irgc's cyber-electronic command. in november 2023 it hit multiple us water and wastewater facilities running israeli-made unitronics controllers.
🚨 EUVD-2026-102133
📊 8.3/10
🏢 Unitronics
📝 : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/Uni...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102133
#cybersecurity #infosec #cve #euvd
📊 8.3/10
🏢 Unitronics
📝 : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/Uni...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102133
#cybersecurity #infosec #cve #euvd
October 15, 2026 at 7:04 PM
🚨 EUVD-2026-102133
📊 8.3/10
🏢 Unitronics
📝 : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/Uni...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102133
#cybersecurity #infosec #cve #euvd
📊 8.3/10
🏢 Unitronics
📝 : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/Uni...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102133
#cybersecurity #infosec #cve #euvd
Default passwords on exposed PLCs let attackers lock operators out of US water systems. https://intel.threadlinqs.com/threat/TL-2026-2972 #ThreatIntel #July #MicroLogix #ICS
October 6, 2026 at 2:35 PM
Default passwords on exposed PLCs let attackers lock operators out of US water systems. https://intel.threadlinqs.com/threat/TL-2026-2972 #ThreatIntel #July #MicroLogix #ICS
Exposed PLCs are being locked out and rewritten - 30+ water utilities hit while Volt Typhoon waits inside. https://intel.threadlinqs.com/threat/TL-2026-2961 #ThreatIntel #CVE_2021_22681 #KVBotnet #IOControl
October 6, 2026 at 12:49 PM
Exposed PLCs are being locked out and rewritten - 30+ water utilities hit while Volt Typhoon waits inside. https://intel.threadlinqs.com/threat/TL-2026-2961 #ThreatIntel #CVE_2021_22681 #KVBotnet #IOControl
...que en la primera década de este siglo contribuí no poco al ingreso de estas dos en la industria farmacéutica local.
Por mi culpa, por mi culpa, por mi grandísima culpa.
Por mi culpa, por mi culpa, por mi grandísima culpa.
August 20, 2026 at 8:19 PM
...que en la primera década de este siglo contribuí no poco al ingreso de estas dos en la industria farmacéutica local.
Por mi culpa, por mi culpa, por mi grandísima culpa.
Por mi culpa, por mi culpa, por mi grandísima culpa.
CyberAv3ngers Target Unitronics, Federal Signal, and Genmark Siren Controllers in Psychological Warfare Campaign
##OTSecurity ##ThreatActor ##Unitronics ##CriticalInfrastructure ##CyberAv3ngers
https://flagthis.com/newsletter/2026/06/27/tldr/4003
##OTSecurity ##ThreatActor ##Unitronics ##CriticalInfrastructure ##CyberAv3ngers
https://flagthis.com/newsletter/2026/06/27/tldr/4003
June 27, 2026 at 10:09 PM
CyberAv3ngers Target Unitronics, Federal Signal, and Genmark Siren Controllers in Psychological Warfare Campaign
##OTSecurity ##ThreatActor ##Unitronics ##CriticalInfrastructure ##CyberAv3ngers
https://flagthis.com/newsletter/2026/06/27/tldr/4003
##OTSecurity ##ThreatActor ##Unitronics ##CriticalInfrastructure ##CyberAv3ngers
https://flagthis.com/newsletter/2026/06/27/tldr/4003
📰 #security
The U.S. government is warning that threat actors are targeting security weaknesses in a #Unitronics device that is used to control various processes in water and wastewater treatment facilities.
duo.com/decipher/cis...
The U.S. government is warning that threat actors are targeting security weaknesses in a #Unitronics device that is used to control various processes in water and wastewater treatment facilities.
duo.com/decipher/cis...
CISA: Threat Actors Targeting Unitronics Devices Used in Water Facilities
CISA is urging water facilities in the critical infrastructure sector to change the default passwords on their Unitronics devices and disconnect them from the internet after a water treatment facility in Pennsylvania was hit by a cyberattack.
duo.com
November 30, 2023 at 10:37 AM
📰 #security
The U.S. government is warning that threat actors are targeting security weaknesses in a #Unitronics device that is used to control various processes in water and wastewater treatment facilities.
duo.com/decipher/cis...
The U.S. government is warning that threat actors are targeting security weaknesses in a #Unitronics device that is used to control various processes in water and wastewater treatment facilities.
duo.com/decipher/cis...
The malware's modular nature makes it capable of compromising a broad spectrum of devices from various manufacturers, including D-Link, Hikvision, Baicells, Red Lion, Orpak, Phoenix Contact, Teltonika, and Unitronics. www.bleepingcomputer.com/news/securit...
New IOCONTROL malware used in critical infrastructure attacks
Iranian threat actors are utilizing a new malware named IOCONTROL to compromise Internet of Things (IoT) devices and OT/SCADA systems used by critical infrastructure in Israel and the United States.
www.bleepingcomputer.com
December 13, 2024 at 1:59 PM
The malware's modular nature makes it capable of compromising a broad spectrum of devices from various manufacturers, including D-Link, Hikvision, Baicells, Red Lion, Orpak, Phoenix Contact, Teltonika, and Unitronics. www.bleepingcomputer.com/news/securit...
The Treasury Department said the six officials are part of the Iranian IRGC-CEC, a Tehran organization “responsible for a series of malicious cyber activities against critical infrastructure in the United States and other countries.” www.securityweek.com/us-slaps-san...
US Slaps Sanctions on ‘Dangerous’ Iranian Hackers Linked to Water Utility Hacks
The US government slaps sanctions against six Iranian government officials linked to cyberattacks against Israeli PLC vendor Unitronics.
www.securityweek.com
February 3, 2024 at 3:40 PM
The Treasury Department said the six officials are part of the Iranian IRGC-CEC, a Tehran organization “responsible for a series of malicious cyber activities against critical infrastructure in the United States and other countries.” www.securityweek.com/us-slaps-san...
An Iran-linked hacktivist group calling itself Cyber Av3ngers has taken credit for the attack. The anti-Israel hackers appear to have targeted an industrial control system (ICS) made by Israeli company Unitronics. www.securityweek.com/hackers-hija...
Hackers Hijack Industrial Control System at US Water Utility
Municipal Water Authority of Aliquippa in Pennsylvania confirms that hackers took control of a booster station, but says no risk to drinking water or water supply.
www.securityweek.com
November 28, 2023 at 3:22 PM
An Iran-linked hacktivist group calling itself Cyber Av3ngers has taken credit for the attack. The anti-Israel hackers appear to have targeted an industrial control system (ICS) made by Israeli company Unitronics. www.securityweek.com/hackers-hija...
Since the start of the Israel Hamas war, the Iranian hacking group CyberAv3ngers has targeted US water utilities that use Israel-manufactured controllers
#Unitronics #Iran #security #cybersecurity #password #hacking #hacked
www.fastcompany.com/91002831/us-...
#Unitronics #Iran #security #cybersecurity #password #hacking #hacked
www.fastcompany.com/91002831/us-...
December 26, 2023 at 6:07 AM
Since the start of the Israel Hamas war, the Iranian hacking group CyberAv3ngers has targeted US water utilities that use Israel-manufactured controllers
#Unitronics #Iran #security #cybersecurity #password #hacking #hacked
www.fastcompany.com/91002831/us-...
#Unitronics #Iran #security #cybersecurity #password #hacking #hacked
www.fastcompany.com/91002831/us-...
« Residents of a remote area on Ireland’s west coast were left without water last week due to a cyberattack perpetrated by a pro-Iran hacking group targeting a piece of equipment the hackers complained was made in Israel. »
Two-day water outage in remote Irish region caused by pro-Iran hackers
The incident appears to be the latest perpetrated by the Cyber Av3ngers group targeting the Israel-made Unitronics tool.
therecord.media
November 14, 2024 at 9:21 PM
« Residents of a remote area on Ireland’s west coast were left without water last week due to a cyberattack perpetrated by a pro-Iran hacking group targeting a piece of equipment the hackers complained was made in Israel. »
« The advisory notes that Unitronics devices ship with a default password, a practice experts discourage as it makes them more vulnerable to hacking. Best practices call for devices to require a unique password to be created out of the box. »
Breaches by Iran-affiliated hackers spanned multiple U.S. states, federal agencies say
U.S. and Israeli authorities say a small western Pennsylvania water authority was just one of multiple organizations breached by Iran-affiliated hackers who targeted a specific industrial control devi...
apnews.com
November 14, 2024 at 9:21 PM
« The advisory notes that Unitronics devices ship with a default password, a practice experts discourage as it makes them more vulnerable to hacking. Best practices call for devices to require a unique password to be created out of the box. »
« The hackers — who said they are attacking water and energy facilities using products from Israel — forced the Municipal Water Authority of Aliquippa to take systems offline and switch to manual operations in order to remove any risk to the municipality's water or water supply.
CISA warns of attacks on Unitronics tool used by water utilities, wastewater systems
An incident in Pennsylvania motivated the federal government to alert companies about ways hackers can break into Unitronics programmable logic controllers (PLCs).
therecord.media
November 14, 2024 at 9:21 PM
« The hackers — who said they are attacking water and energy facilities using products from Israel — forced the Municipal Water Authority of Aliquippa to take systems offline and switch to manual operations in order to remove any risk to the municipality's water or water supply.
Iran-linked hackers compromised US water/energy PLCs per FBI/NSA/CISA advisory. CyberAv3ngers previously breached 100+ Unitronics devices; IOControl malware for persistence. Asymmetric cyber warfare: when conventional force fails, code becomes weapon. #CyberWarfare #CriticalInfrastructure
Iran-Linked Hackers Are Sabotaging US Energy and Water Infrastructure
As Trump threatens Iranian infrastructure, the US government warns that Iran has carried out its own digital attacks against US critical infrastructure.
www.wired.com
April 11, 2026 at 6:06 PM
Iran-linked hackers compromised US water/energy PLCs per FBI/NSA/CISA advisory. CyberAv3ngers previously breached 100+ Unitronics devices; IOControl malware for persistence. Asymmetric cyber warfare: when conventional force fails, code becomes weapon. #CyberWarfare #CriticalInfrastructure
Unitronics fixes multiple critical issues in Unistream and Unilogic Products
Unitronics fixes multiple critical issues in Unistream and Unilogic Products
Unitronics has addressed critical vulnerabilities in its UniStream integrated PLC/HMI products, following cyberattacks on water treatment facilities. These vulnerabilities could allow attackers to bypass security mechanisms or execute remote code. Affected issues include improper authentication, path traversal, sensitive information exposure, and OS command injection, with CVE scores ranging from 8.8 to 10.0. Users are advised to update their UniStream UniLogic software to version 1.35.227 or newer and UniStream OS to version 1.35.47 or later to mitigate these risks.
beyondmachines.net
March 21, 2024 at 9:49 AM
Unitronics fixes multiple critical issues in Unistream and Unilogic Products
Unitronics Vision Series VisiLogic Software vulnerable due to default password
Unitronics Vision Series VisiLogic Software vulnerable due to default password
The Unitronics Vision Series, specifically its VisiLogic Software, is susceptible to high-risk remote attacks (CVE-2023-6448, CVSS v3 score of 9.8) due to default administrative passwords in versions prior to 9.9.00, potentially allowing attackers administrative control, particularly impacting critical water and wastewater infrastructure.
beyondmachines.net
December 15, 2023 at 11:52 AM
Unitronics Vision Series VisiLogic Software vulnerable due to default password
Two-day water outage in remote Irish region caused by pro-Iran hackers
Two-day water outage in remote Irish region caused by pro-Iran hackers
The incident appears to be the latest perpetrated by the Cyber Av3ngers group targeting the Israel-made Unitronics tool.
therecord.media
December 11, 2023 at 7:06 PM
Two-day water outage in remote Irish region caused by pro-Iran hackers