EU sanctions Chinese and Iranian actors over cyberattacks on critical infrastructure

Feed of March 16–17, 2026 cyber news: The EU imposed sanctions on Chinese and Iranian companies/individuals for cyberattacks on critical infrastructure. The RondoDox botnet dramatically increased activity, targeting 174 vulnerabilities with up to ~15,000 daily exploit attempts. China-linked CL-STA-1087 has conducted long-running espionage against Southeast Asian militaries using AppleChris and MemFun. ClickFix social-engineering campaigns are shifting to macOS and using ChatGPT-style lures to deploy infostealers (e.g., AMOS). A malware-free attack against Stryker’s Microsoft environment wiped/