CanisterWorm: Cybercrooks Hijack Iran Tensions for Cloud Data Heists
A worm called CanisterWorm just lit up Iranian cloud setups, wiping data based on time zones and language. Behind it? TeamPCP, who own 97% of their hits on Azure and AWS misconfigs.
⚡ Key Takeaways
- TeamPCP exploits cloud misconfigs in 97% Azure/AWS environments for automated breaches.
- CanisterWorm uses blockchain ICP canisters for resilient, takedown-proof delivery.
- Financially driven, not geopolitical; predicts escalation to broader ransomware waves.
🧠 What's your take on this?
Cast your vote and see what Threat Digest readers think
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by Krebs on Security
Related Stories
Ransomware & Malware
0ktapus Phishing Snags 10,000 Credentials Across 130 Companies—Your MFA Is the Weak Link
Ransomware & Malware
Claude Code's 50-Command Cap: The Bypass That Unlocks Your Dev Machine
Cloud Security
TeamPCP's Supply Chain Onslaught Hits Databricks, Splits Ransomware Into Two Deadly Tracks
Ransomware & Malware