Researchers Discover Malware Used by Nation-Sates to Attack Industrial Systems

Claroty’s Team82 discovered IOCONTROL, a custom malware tool used by the Iran-linked CyberAv3ngers to target IoT/OT/SCADA devices (IP cameras, routers, PLCs, HMIs, firewalls) across Western infrastructure; impacted vendors include Baicells, D-Link, Hikvision, Red Lion, Orpak, Phoenix Contact, Teltonika and Unitronics, with campaigns compromising Orpak and Gasboy fuel management systems in Israel and the U.S., prompting U.S. Treasury sanctions and a $10M bounty.