US government agencies have issued a joint advisory warning that Iranian-linked hackers are actively targeting and sabotaging critical industrial control systems across American energy and water utility sectors.

Key Points

• The FBI, NSA, CISA, and Department of Energy identified attacks targeting programmable logic controllers (PLCs), including those manufactured by Rockwell Automation.
• Hackers are compromising industrial devices to manipulate system displays, causing operational downtime and financial losses at critical infrastructure sites.
• Security experts link the activity to groups like CyberAv3ngers, which previously targeted Unitronics devices in water utilities across the US, Israel, and Ireland.
• The campaign utilizes asymmetric warfare tactics to disrupt physical machinery, marking an escalation in cyber hostilities amid ongoing regional military tensions.
• Recent threats from the Iranian-affiliated group Handala suggest a coordinated effort to combine cyber operations with physical military actions against US targets.

Why it Matters

These attacks represent a significant shift toward persistent, high-stakes sabotage of essential public services rather than mere digital vandalism. The targeting of industrial control systems poses a direct risk to physical safety and operational stability, forcing utility providers to rapidly harden their digital defenses against state-sponsored threats.