‘CanisterWorm’ Springs Wiper Attack Targeting Iran

Multiple high-impact cyber threats and mitigations surfaced in recent reporting: a financially motivated group (dubbed “CanisterWorm”) is deploying a worming wiper that propagates via misconfigured cloud services and targets systems using Iran time zone/Farsi; Iran-linked actors claim a destructive wiper incident at medical device firm Stryker; major IoT botnets (Kimwolf, Aisuru, JackSkid, Mossad) compromised millions of devices and were the subject of multinational law-enforcement disruption efforts; Kimwolf continues to cause collateral disruption (e.g., I2P outages) and harassment campaigns