CTI Swarm
Zurück zu allen Deep Dives
ALL CISA ADVISORIES

Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure

Strategische Zusammenfassung

Describes active exploitation of PLCs by a specific nation-state actor (Iranian-affiliated) targeting critical infrastructure, which includes manufacturing environments.

Volltext

Title: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure | CISA

URL Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-097a

Markdown Content: # Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure | CISA

[Skip to main content](https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-097a#main)

![Image 1: U.S. flag](https://www.cisa.gov/profiles/cisad8_gov/themes/custom/gesso/dist/images/us_flag_small.png)

An official website of the United States government

Here’s how you know

Here’s how you know

![Image 2: Dot gov](https://www.cisa.gov/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-dot-gov.svg)

**Official websites use .gov**

A **.gov** website belongs to an official government organization in the United States.

![Image 3: HTTPS](https://www.cisa.gov/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-https.svg)

**Secure .gov websites use HTTPS**

A **lock** () or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

**Due to the lapse in federal funding, this website will not be actively managed.**[**Read More**](https://go.dhs.gov/lapse-2026)

[no-cost Cyber Services](https://www.cisa.gov/resources-tools/resources/free-cybersecurity-services-and-tools "Free Cyber Services")[Secure by design](https://www.cisa.gov/securebydesign)[Secure Your Business](https://www.cisa.gov/secureyourbusiness)[Shields Up](https://www.cisa.gov/node/8056)[Report A Cyber Issue](https://www.cisa.gov/report)

[![Image 4: Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience](https://www.cisa.gov/sites/default/files/images/SVG/header_logo_tagline_update.svg)![Image 5: Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience](https://www.cisa.gov/sites/default/files/images/SVG/header_logo_tagline_update.png)](https://www.cisa.gov/)

[![Image 6: CISA Logo](https://www.cisa.gov/sites/default/files/images/SVG/mobile_logo_wordmark.svg)](https://www.cisa.gov/)

Search

[×](javascript:void(0) "Clear search box")

Menu

![Image 7: America's Cyber Defense Agency](https://www.cisa.gov/sites/default/files/images/SVG/header_tagline_mobile_update.svg)

Close

[×](javascript:void(0) "Clear search box")

* Topics[Topics](https://www.cisa.gov/topics) [Cybersecurity Best Practices](https://www.cisa.gov/topics/cybersecurity-best-practices) [Cyber Threats and Response](https://www.cisa.gov/topics/cyber-threats-and-response) [Critical Infrastructure Security and Resilience](https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience) [Election Security](https://www.cisa.gov/topics/election-security) [Emergency Communications](https://www.cisa.gov/topics/emergency-communications) [Industrial Control Systems](https://www.cisa.gov/topics/industrial-control-systems) [Information and Communications Technology Supply Chain Security](https://www.cisa.gov/topics/information-communications-technology-supply-chain-security) [Partnerships and Collaboration](https://www.cisa.gov/topics/partnerships-and-collaboration) [Physical Security](https://www.cisa.gov/topics/physical-security) [Risk Management](https://www.cisa.gov/topics/risk-management) [How can we help?](https://www.cisa.gov/audiences) [Government](https://www.cisa.gov/topics/government)[Educational […]

[… 37,898 Zeichen — nächste Zone: keyword-dense paragraphs …]

* Authoring Agencies: [IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities](https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a "IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities") * CISA: [Bulletproof Defense: Mitigating Risks From Bulletproof Hosting Providers](https://www.cisa.gov/resources-tools/resources/bulletproof-defense-mitigating-risks-bulletproof-hosting-providers "Bulletproof Defense: Mitigating Risks From Bulletproof Hosting Providers") * EPA: [Cybersecurity for the Water Sector](https://www.epa.gov/cyberwater/epa-cybersecurity-water-sector "Cybersecurity for the Water Sector") * CISA: [Water and Wastewater Systems Sector](https://www.cisa.gov/water "Water and Wastewater Cybersecurity") * CISA Alert: [Exploitation of Unitronics PLCs used in Water and Wastewater Systems](https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems "Exploitation of Unitronics PLCs used in Water and Wastewater Systems") * CISA: [Iran Threat Overview and Advisories](https://www.cisa.gov/topics/cyber-threats-and-advisories/advanced-persistent-threats/iran "Iran Cyber Threat Overview and Advisories") * FBI: [The Iran Threat](https://www.fbi.gov/investigate/counterintelligence/the-iran-threat "The Iran Threat") * CISA, MITRE: [Best Practices for MITRE ATT&CK Mapping](https://www.cisa.gov/news-events/news/best-practices-mitre-attckr-mapping "Best Practices for MITRE ATT&CK Mapping") * CISA: [Decider Tool](https://github.com/cisagov/Decider/ "Decider Tool (opens in a new window)") * CISA: [Cross-Sector Cybersecurity Performance Goals 2.0](https://www.cisa.gov/cybersecurity-performance-goals-2-0-cpg-2-0 "Cross-Sector Cybersecurity Performance Goals 2.0") * CISA: [No-Cost Cybersecurity Services and Tools](https://www.cisa.gov/topics/cyber-threats-and-advisories/cyber-hygiene-services "No-Cost Cybersecurity Services and Tools") * CISA: [Secure by Demand: Priority Considerations for Operational Technology Owners and Operators when Selecting Digital Products](https://www.cisa.gov/resources-tools/resources/secure-demand-priority-considerations-operational-technology-owners-and-operators-when-selecting "Secure by Demand: Priority Considerations for […]

[](http […]

[… 37,392 Zeichen — nächste Zone: tail …]

[Return to top](https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-097a#top)

* [Topics](https://www.cisa.gov/topics) * [Spotlight](https://www.cisa.gov/spotlight) * [Resources & Tools](https://www.cisa.gov/resources-tools) * [News & Events](https://www.cisa.gov/news-events) * [Careers](https://www.cisa.gov/careers) * [About](https://www.cisa.gov/about)

[Cybersecurity & Infrastructure Security Agency](https://www.cisa.gov/ "Go to the Cybersecurity & Infrastructure Security Agency homepage")

* [Facebook](https://www.facebook.com/CISA) * [X](https://x.com/CISAgov) * [LinkedIn](https://www.linkedin.com/company/cybersecurity-and-infrastructure-security-agency) * [YouTube](https://www.youtube.com/@cisagov) * [Instagram](https://www.instagram.com/cisagov) * [RSS](https://www.cisa.gov/subscribe-updates-cisa)

CISA Central[1-844-Say-CISA](tel:1-844-Say-CISA)[contact@cisa.dhs.gov](mailto:contact@cisa.dhs.gov)

DHS Seal

CISA.gov

An official website of the U.S. Department of Homeland Security

* [About CISA](https://www.cisa.gov/about "About CISA") * [Budget and Performance](https://www.dhs.gov/performance-financial-reports "Budget and Performance") * [DHS.gov](https://www.dhs.gov/ "Department of Homeland Security") * [FOIA Requests](https://www.dhs.gov/foia "FOIA Requests") * [No FEAR Act](https://www.cisa.gov/no-fear-act "No FEAR Act Reporting") * [Office of Inspector General](https://www.oig.dhs.gov/ "Office of Inspector General") * [Privacy Policy](https://www.cisa.gov/privacy-policy "Privacy Policy") * [Subscribe](https://public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=USDHSCISA_138 "Subscribe to Email Updates") * [The White House](https://www.whitehouse.gov/ "The White House") * [USA.gov](https://www.usa.gov/ "USA.gov") * [Website Feedback](https://www.cisa.gov/forms/feedback "Website Feedback")

Give Feedback