Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker
2026-03-19T19:23:31Z•551705ccba3a10704736c260737c009e2eb94323c9e5332db37fbf4a59fd16d1
ai-assistantsandroid-tvbadbox-2.0botmasterbotnetddosdoxingextortioni2pincident-responseiotiran-linkedkimwolfmedtechmfa-bypassmicrosoft-patch-tuesdaynation-statephishingphishing-as-a-servicescattered-lapsus-shinyhuntersstarkillerswattingvulnerability-managementwiperzero-day
What happened
KrebsOnSecurity feed highlights multiple active, high-impact threats: an Iran-linked actor claims a destructive wiper attack against medical‑technology firm Stryker (large workforce disruption reported in Ireland and operational impacts at US HQ); the massive Kimwolf IoT botnet (≈2M+ devices) continues to fuel large DDoS campaigns, swamp the I2P anonymity network, and persistently infect corporate and government networks while its alleged botmaster (“Dort”) conducts retaliatory harassment and doxing. A stealthy phishing‑as‑a‑service called “Starkiller” proxies real login pages and relays MFA,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 551705ccba3a10704736c260737c009e2eb94323c9e5332db37fbf4a59fd16d1
- Enrichment time
- 2026-03-19T19:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.