Back Securityaffairs.Co

Inside ZionSiphon: politically driven malware aims at Israeli water systems

Securityaffairs.Co •Pierluigi Paganini • April 17, 2026

New ZionSiphon malware targets water systems, and allows attackers to alter pressure and chlorine levels. A flaw makes it ineffective for now. Darktrace analyzed ZionSiphon, a new malware designed to target water treatment and desalination systems, which aims to disrupt operations by altering hydraulic pressure and increasing chlorine levels to unsafe levels. The malware combines […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ZionSiphon Malware Targets Israeli Water Infrastructure for Sabotage ZionSiphon is a newly discovered malware designed to target Israeli water treatment and desalination systems. It is capable of manipulating hydraulic pressures and chlorine levels to potentially sabotage operations. The malware contains hardcoded IP ranges specific to Israel and includes political messaging indicating its ideological motivations. Researchers at Darktrace found a critical flaw in the malware's encryption logic, rendering it currently non-functional but posing a significant threat if future versions are released without this flaw being addressed. The malware's targeting mechanism checks for the presence of water-related software and configuration files, and it has a USB propagation feature to spread to air-gapped systems. Although not operational now, the potential for damage remains high if the flaws are fixed. The malware is still in early development, with only partial functionality in its code. 23 sources 73

Inside ZionSiphon: politically driven malware aims at Israeli water systems

The full story

Extracted Entities

Attack Types (1)

Malware (1)