Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
3 IOCs

Iranian Hackers Use Legitimate Engineering Tools to Hijack Industrial Controllers

Cyber Press
Cyber Press
Published July 27, 2026Original Report

Excerpt

U.S. federal agencies have issued an urgent warning that Iranian-affiliated threat actors are targeting internet-exposed programmable logic controllers (PLCs) across critical infrastructure, using legitimate engineering software to alter industrial operations. The activity has affected government facilities, water and wastewater organizations, and energy-sector environments, causing operational disruption and financial loss in some cases. The campaign targets PLCs from…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE175.110.121.42141.11.164.153185.82.73.175CAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(3)
Capability
Victim

Indicators of Compromise

Open the mindmap →

3 indicators

TypeIndicatorConfidenceScoreFirst Seen
IP175.110.121.42HighScore 68/100First seen
IP141.11.164.153HighScore 68/100First seen
IP185.82.73.175HighScore 72/100First seen

IOC Relationship Graph

Building graph…