Iranian hackers' targeting of US critical infrastructure has escalated since start of war, US says

2026-04-07 22:54:54

Abstract generation in progress

April 7 (Reuters) - Iranian hacking campaigns targeting equipment used across multiple U.S. critical infrastructure sectors are escalating in response to hostilities, U.S. cybersecurity, law enforcement and ‌intelligence agencies said on Tuesday.

The hackers are targeting publicly exposed programmable logic controllers and supervisory control and data acquisition displays, according to the advisory., opens new tab The targeted devices are used to interact with or control certain critical infrastructure-related ⁠equipment and systems, the advisory said.

The Reuters Iran Briefing newsletter keeps you informed with the latest developments and analysis of the Iran war. Sign up here.

The hackers are seeking to cause “disruptive effects within the United States,” according to the advisory. “In a few cases, this activity has resulted in operational disruption and financial loss."

The warning comes as President Donald Trump warned that “a whole civilization will die tonight” if Iran fails to make a deal with the U.S., while Iran said it ‌would ⁠attack additional infrastructure targets across its Gulf neighbors.

In some cases the hackers interacted with data files in the systems to alter display data, while also extracting device project data, according to the ⁠advisory.

The hacking operations targeted unnamed critical infrastructure organizations in the government services and facilities, water and wastewater systems and energy sectors, according to ⁠the advisory.

The advisory was issued by the FBI, the National Security Agency, the Cybersecurity and Infrastructure Security Agency, the ⁠Environmental Protection Agency, the Department of Energy and U.S. Cyber Command’s Cyber National Mission Force.

The FBI declined additional comment.

Reporting by AJ Vicens in Detroit; Editing by Matthew Lewis

Our Standards: The Thomson Reuters Trust Principles., opens new tab

Suggested Topics:
Cybersecurity
X
Facebook
Linkedin
Email
Link

Purchase Licensing Rights

A.J. Vicens

Thomson Reuters

Cybersecurity correspondent covering cybercrime, nation-state threats, hacks, leaks and intelligence

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.