ZionSiphon malware targets Israeli water treatment and desalination systems
June, 2026 (Reported mid-2026)
Darktrace flagged ZionSiphon, malware built for industrial environments and aimed at Israeli water treatment and desalination systems. According to Bitsight's summary, it scans for industrial devices over several protocols and has sabotage capability aimed at chlorine and pressure controls. Bitsight says it may have been circulating since mid-2025.
Why it matters
Malware written specifically for industrial processes is rare, so each case shows where state-aligned developers are putting effort.
What defenders can take from it
- Monitor OT networks for devices scanning other devices over several industrial protocols.
- Keep OT networks separated from business networks and the internet.