Pre-Stuxnet Sabotage Malware ‘Fast16’ Linked to US-Iran Cyber Tensions

2026-04-24T19:24:10Z165b3a3f44aa18642218a16b0ffaa58a9b94437d9ee50d6b5418e5792cd1c30c
CrowdStrikeFast16FirestarterLogScaleNessusShai-HuludTeamPCPTenableUS-Iran tensionsbackdoorciscocyber-espionagefirewallincident-responsemalwarepatchingsupply-chainvulnerabilities

What happened

Multiple high-impact incidents and patch disclosures: researchers linked pre-Stuxnet sabotage malware “Fast16” to US–Iran cyber tensions—Fast16 targets high-precision calculation software and can self-propagate. A US federal agency’s Cisco firewall was found infected with a persistent “Firestarter” backdoor providing remote access and post-patch persistence. CrowdStrike patched a critical LogScale vulnerability and Tenable fixed a high-severity Nessus flaw, while a Bitwarden NPM package was compromised in a supply-chain attack tied to a Checkmarx incident claimed by TeamPCP (references to the

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityweek
Record identifier
165b3a3f44aa18642218a16b0ffaa58a9b94437d9ee50d6b5418e5792cd1c30c
Enrichment time
2026-04-24T19:24:10Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.