Iran-Linked Actors Breach Are Targeting US Water and Energy Control Systems

U.S. agencies warn that Iran-linked APT actors have been intruding into internet-exposed PLCs and OT devices (including Rockwell, Schneider Electric, and Siemens controllers), exfiltrating and modifying project files via vendor engineering tools and common OT ports, manipulating HMI/SCADA displays and disabling shutdowns/alarms—causing operational disruption and financial loss across water, energy, and other critical infrastructure sectors; agencies recommend removing direct internet access to PLCs, enforcing vendor best practices, and monitoring OT ports and logs for indicators of compromise.