Iran-linked hackers have disrupted multiple US industrial sites

Key Points:

• Iran-linked hackers have recently targeted multiple US oil, gas, and water sites, causing operational disruptions and forcing manual operations, according to a federal advisory and sources familiar with the investigation.
• The cyberattacks mark an escalation in Tehran's campaign since the US-Israeli conflict with Iran began, with hackers attempting to use destructive malware to delete data and testing safety systems critical to human life.
• US agencies including the FBI and Department of Homeland Security issued urgent warnings to critical infrastructure firms about the ongoing hacking campaign aimed at causing disruptive effects within the United States.
• The hackers exploit vulnerabilities in internet-facing programmable logic controllers at industrial plants, potentially allowing not only disruption but also dangerous modifications to physical operations, raising serious safety concerns.
• These cyberattacks are part of Iran’s asymmetric response amid ongoing bombings of Iranian facilities, combining psychological tactics with technical intrusions, including previous hacks targeting FBI personnel and US medical device companies.