Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems

_Executive summary:_ Cybersecurity firms disclosed three malicious implants: **ZionSiphon**, an unfinished but politically motivated ICS-targeting malware that scans local subnets, probes OT protocols (Modbus, DNP3, S7comm), tampers with water treatment parameters, and propagates via removable media; **RoadK1ll**, a Node.js reverse-tunneling implant that converts a compromised host into an access relay; and **AngrySpark**, a VM-obfuscated, multi-stage backdoor that ran on a U.K. host and used stealthy beaconing and encrypted payload execution.