Pre-Stuxnet Sabotage Malware ‘Fast16’ Linked to US-Iran Cyber Tensions
2026-04-24T19:24:10Z•165b3a3f44aa18642218a16b0ffaa58a9b94437d9ee50d6b5418e5792cd1c30c
CrowdStrikeFast16FirestarterLogScaleNessusShai-HuludTeamPCPTenableUS-Iran tensionsbackdoorciscocyber-espionagefirewallincident-responsemalwarepatchingsupply-chainvulnerabilities
What happened
Multiple high-impact incidents and patch disclosures: researchers linked pre-Stuxnet sabotage malware “Fast16” to US–Iran cyber tensions—Fast16 targets high-precision calculation software and can self-propagate. A US federal agency’s Cisco firewall was found infected with a persistent “Firestarter” backdoor providing remote access and post-patch persistence. CrowdStrike patched a critical LogScale vulnerability and Tenable fixed a high-severity Nessus flaw, while a Bitwarden NPM package was compromised in a supply-chain attack tied to a Checkmarx incident claimed by TeamPCP (references to the
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 165b3a3f44aa18642218a16b0ffaa58a9b94437d9ee50d6b5418e5792cd1c30c
- Enrichment time
- 2026-04-24T19:24:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.