‘CanisterWorm’ Springs Wiper Attack Targeting Iran

Multiple high-impact campaigns and tooling observed: a financially motivated group unleashed “CanisterWorm,” a wormy wiper that spreads via poorly secured cloud services and targets systems using Iran time zone or Farsi locale; Iran-linked actors claim a destructive wiper attack against medtech firm Stryker; law-enforcement disrupted four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that powered record DDoS attacks and continue to impact anonymity networks (I2P) and victims; Kimwolf’s operator (“Dort”) remains an active threat actor. Separately, a new phishing-as-a-service called “S