‘CanisterWorm’ Springs Wiper Attack Targeting Iran

Multiple high-impact threats and remediation actions were reported: a financially motivated group released “CanisterWorm,” a cloud-spreading worm that wipes systems configured for Iran time zone or Farsi and is being used for theft/extortion; U.S., Canadian and German authorities disrupted four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that had compromised ~3+ million devices and were used for record DDoS attacks; the Kimwolf operator (“Dort”) continues harassment and infrastructure abuse; a stealthy phishing‑as‑a‑service called “Starkiller” proxies real login sites and relays MX