Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack
2026-04-22T13:24:16Z•3fe0117ee3bbe8717a6bc8d06d50a38d25f47292c03baf8c3c1a222136e029ff
AI-supply-chainAnthropic MCPCVE-2023-27351CVE-2024-3721CVE-2026-40372CVE-2026-5752CVE-2026-5760LOTUSLITELotus WiperMiraiMustang PandaNFC data theftNGateNexcoriumOT/ICS targetingRCESystemBCTerrariumThe GentlemenVercel breach (Context.ai)ZionSiphonmobile trojanransomwaresandbox escapewiper
What happened
Multiple high-impact cyber incidents and critical vulnerabilities were reported: a destructive Lotus Wiper campaign hit Venezuelan energy systems and espionage-focused LOTUSLITE (Mustang Panda) targeted Indian banks and South Korean policy circles; ZionSiphon targeted Israeli water/desalination OT; SystemBC activity revealed 1,570+ victims linked to The Gentlemen ransomware operation. Several critical RCE and sandbox-escape flaws were disclosed and/or patched — ASP.NET Core privilege-escalation CVE-2026-40372 (CVSS 9.1), Terrarium sandbox escape CVE-2026-5752 (CVSS 9.3), and SGLang RCE CVE-202
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 3fe0117ee3bbe8717a6bc8d06d50a38d25f47292c03baf8c3c1a222136e029ff
- Enrichment time
- 2026-04-22T13:24:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.