‘CanisterWorm’ Springs Wiper Attack Targeting Iran

A financially motivated threat group has deployed 'CanisterWorm', a self-spreading worm that targets poorly secured cloud services and wipes data on systems configured with Iran's time zone or Farsi as the default language. The worm propagates through misconfigured cloud environments, posing a risk to any developer or organization with improperly secured cloud infrastructure. Developers should audit cloud service configurations and access controls immediately, as misconfigured services can serve as an entry point for destructive wiper malware.