‘CanisterWorm’ Springs Wiper Attack Targeting Iran

A set of high-impact threats and trends: a financially motivated group unleashed “CanisterWorm,” a cloud-propagating worm that targets systems using Iran time zone or Farsi and wipes data; Iran-linked actors claim a disruptive wiper attack against medtech firm Stryker. Law enforcement disrupted four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that controlled millions of devices and enabled record DDoS attacks; Kimwolf’s operators (handle “Dort”) have also harassed researchers and abused anonymity networks (I2P). A new phishing-as-a-service called “Starkiller” proxies real login/OTP