‘CanisterWorm’ Springs Wiper Attack Targeting Iran

Multiple active, high-impact threats and mitigation guidance: a financially motivated group deployed “CanisterWorm,” a cloud-propagating worm/wiper that targets systems using Iran time zone or Farsi locales and wipes data; Iran-linked actors claim responsibility for a destructive wiper incident at medical-device firm Stryker. Law enforcement disrupted the infrastructure for four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that had compromised millions of devices and were used for record DDoS attacks; Kimwolf remains a significant active threat (and the subject of doxing/SWAT-style骚