‘CanisterWorm’ Springs Wiper Attack Targeting Iran

Multiple high-impact threats observed: a financially motivated group unleashed ‘CanisterWorm’, a worm that spreads via poorly secured cloud services and performs destructive wipes on systems with Iran timezone/Farsi settings; Iran-linked actors claimed a wiper attack against medical device vendor Stryker; law enforcement disrupted four massive IoT botnets (Kimwolf, Aisuru, JackSkid, Mossad) used for record DDoS operations and Kimwolf continues disruptive activity (including targeting I2P). New phishing-as-a-service (“Starkiller”) proxies real login pages to capture credentials and MFA tokens.■