Iran-Backed Hackers Disrupt US Water and Energy Systems Across Multiple States

Iran-backed hackers escalated their campaign against American critical infrastructure.

Federal agencies identified the attackers as Iran-affiliated advanced persistent threat actors.

Al-Yawm Al-Sabe'

They exploited vulnerabilities in Rockwell Automation's Allen-Bradley programmable logic controllers.

Some victims experienced operational disruption and financial loss.

The Treasury Department imposed sanctions on Iranian intelligence officials and Handala associates.

Hackers caused disruptions at multiple US oil and gas and water sites.

Facilities were forced to operate manually.

BleepingComputer

Iran demonstrated capability to intrude into critical infrastructure systems.

Handala's tactics evolved from espionage to destructive operations.

The Iranian cyberthreat emerged as part of a broader tit-for-tat escalation.

Foreign Minister Amir-Abdollahian called the strikes illegal and offensive.

The multiagency advisory marked the first public warning since the war began.

Handala expanded its targeting to medical and municipal government sites.

The LA police arrested a suspect linked to LAX cyberattacks.

CNN

Cybersecurity experts warned the campaign was highly sophisticated.

Security firms backed coordinated defenses.

“Iran-linked hackers have successfully targeted and caused disruptions at multiple US oil and gas and water sites in recent weeks, according to a federal advisory released Tuesday and three sources familiar with the investigation”

CNN

Lawmakers proposed bills requiring greater transparency on hacking costs.

CyberScoop

The US wrestled with how to integrate cyber defense and public communication.