IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities

Recent investigations reveal IRGC-affiliated cyber actors targeting critical infrastructure sectors, including U.S. water and wastewater systems. These malicious campaigns exploit vulnerabilities in programmable logic controllers (PLCs), compromising operations and posing significant risks. Organizations must take immediate action by securing internet-exposed devices, implementing multifactor authentication, and adopting robust mitigation strategies. Proactive steps today can prevent deeper cyber-physical impacts tomorrow.