ZionSiphon malware designed to sabotage water treatment systems

ZionSiphon is a newly reported operational-technology (OT) malware designed to sabotage water treatment and desalination systems by increasing chlorine dosing and manipulating pressure. Darktrace's analysis shows the current sample contains a broken country-verification XOR check that triggers self-destruct, making it non-functional today, but the code includes USB propagation, protocol scanning for Modbus/DNP3/S7comm, and functions to append damaging configuration changes—indicating high destructive potential if the flaw is fixed.