Cyberattack Targets Israeli Desalination Plants With Sabotage Malware

Researchers identified a malware strain called ZionSiphon that appears purpose-built to target Israeli desalination and water-treatment infrastructure: it contains obfuscated hardcoded IP ranges, strings referencing water systems, industrial-protocol scanning (Modbus), persistence and privilege escalation features, and payloads intended to alter chlorine and pressure settings—though analysts note the current build is incomplete and contains targeting and protocol implementation flaws that limit its operational effectiveness.