Iranian hackers from CyberAv3ngers developed malware that was found in a fuel management system. Named IOCONTROL, the malware was designed to attack a wide range of devices produced by Western manufacturers, including devices deployed at gas stations and water systems. Researchers believe the same group is also responsible for last fall’s attack on Unitronics devices, affecting water systems in the US and Israel.
Yearlong supply-chain attack targeting security pros steals 390K credentials
Cybersecurity firm Datadog has revealed that actor MUT-1244 used proof-of-concept exploits and phishing emails to install malware @0xengine/xmlrpc, stealing around 390,000 credentials from infected machines.