‘CanisterWorm’ Springs Wiper Attack Targeting Iran

Collection of KrebsOnSecurity reports describing multiple high-impact threats and remediations in early 2026: a new “CanisterWorm” wiper that propagates via poorly secured cloud services and wipes systems configured for Iran time zone or Farsi, allegedly tied to financially motivated extortionists seeking to exploit the Iran conflict; disruption by US/Canadian/German authorities of four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that infected >3 million devices and powered record DDoS attacks; Kimwolf’s operator (“Dort”) and the botnet’s use to overwhelm the I2P anonymity network;