Cyber Mercenaries Deploy Iran-Targeted Wiper Worm via Cloud Infrastructure

A financially motivated cyber extortion group has launched a politically charged wiper campaign against Iranian targets, weaponizing poorly secured cloud services to propagate destructive malware. The group, known as TeamPCP, initiated the attack over the weekend, deploying a self-propagating worm that compromises exposed Docker APIs, Kubernetes clusters, and Redis servers before wiping data from systems matching Iran’s timezone or configured with Farsi as the default language.

Reported by: Nova Stirling

Aerospace & Space Tech Correspondent