Iran, Russia, China Target Water Systems for Sabotage

DomainTools research documents nation-state activity targeting water and wastewater infrastructure (Iranian, Russian, and Chinese actors) with examples from 2024–2025; motives range from opportunistic propaganda and sabotage to long-term strategic prepositioning. The report highlights that attackers largely exploit basic operational weaknesses—exposed HMIs/PLCs, weak or default credentials, remote access compromise, and poor OT/IT segmentation—and recommends that organizations apply traditional security fundamentals and invest in OT-specific detection and engineering expertise.