🦠 Ransomware & Malware

CanisterWorm: Cybercrooks Hijack Iran Tensions for Cloud Data Heists

A worm called CanisterWorm just lit up Iranian cloud setups, wiping data based on time zones and language. Behind it? TeamPCP, who own 97% of their hits on Azure and AWS misconfigs.

Threat Digest Apr 03, 2026 3 min read 17 views
Digital worm icon spreading through cloud servers with Iranian flag overlay

⚡ Key Takeaways

  • TeamPCP exploits cloud misconfigs in 97% Azure/AWS environments for automated breaches. 𝕏
  • CanisterWorm uses blockchain ICP canisters for resilient, takedown-proof delivery. 𝕏
  • Financially driven, not geopolitical; predicts escalation to broader ransomware waves. 𝕏
Published by

Threat Digest

Threat intelligence. Zero noise.

#CanisterWorm #TeamPCP #cloud exploits #cloud worm #wiper malware

Worth sharing?

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by Krebs on Security

Related Stories

📬

Stay in the loop

The week's most important stories from Threat Digest, delivered once a week.

No spam. Unsubscribe any time.