Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems

Researchers identified ZionSiphon, a malware targeting Israeli water treatment and desalination systems for sabotage.

• •ZionSiphon was detected June 29, 2025, by Darktrace after the Iran-Israel Twelve-Day War
• •Embeds pro-Iran, pro-Palestine, and pro-Yemen messages while targeting specific Israeli IPv4 ranges
• •Uses Modbus, DNP3, and S7comm protocols to tamper with chlorine dosage and pressure controls
• •Remains in unfinished state, indicating ongoing development of multi-protocol OT manipulation techniques
• •Also covers RoadK1ll Node.js implant for network relay and AngrySpark VM-obfuscated backdoor

This summary was automatically generated by AI based on the original article and may not be fully accurate.