aa23-335a-irgc-affiliated-cyber-actors-exploit-plcs-in-multiple-sectors-1

This joint advisory from FBI, CISA, NSA, EPA, and INCD reports IRGC-affiliated actors (CyberAv3ngers) actively compromising Unitronics Vision Series PLCs used in water and wastewater systems, exploiting weak/default credentials and internet exposure to deface interfaces and potentially gain deeper access. It includes observed IOCs and TTPs mapped to MITRE ATT&CK, details observed activity against Israeli and U.S. critical infrastructure since late 2023, and provides mitigations and guidance for OT network security, device updates, and secure-by-design recommendations.