logo

Iran-linked hackers access U.S. Water Utilities East Coast - Advisory

ID: b1515c17-2d12-5659-b35a-5480549588c7

STIX ID: report--b1515c17-2d12-5659-b35a-5480549588c7

Feed Name: Ransomware ISAC Blog

Threat Score
85/100

Date Published: 2026-04-09

Date Updated: 2026-07-28

Author: [email protected] (Reyben Cortes)

...
...

**Executive Summary:** Iran-linked and Pro-Russian-aligned hackers are reported to have targeted and compromised PLCs and flushing pumps at small East Coast U.S. water utilities, using a Python-based ICS reconnaissance/exfiltration tool called TRK25-ADVANCED (similar to the prior Kurtlar_SCADA family); the advisory requests broad distribution (TLP:CLEAR).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.