ZionSiphon Malware Hits Israeli Desalination Plants

Gbhackers •Mayura Kathir • April 17, 2026

Hackers are experimenting with new malware designed to sabotage Israeli desalination and water treatment plants using a tool dubbed “ZionSiphon,”. However, the current sample appears to be a faulty or developmental build rather than a fully operational weapon. The code checks IPv4 ranges such as 2.52.0.0–2.55.255.255, 79.176.0.0–79.191.255.255, and 212.150.0.0–212.150.255.255, all of which are geolocated to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ZionSiphon Malware Targets Israeli Water Infrastructure for Sabotage ZionSiphon is a newly discovered malware designed to target Israeli water treatment and desalination systems. It is capable of manipulating hydraulic pressures and chlorine levels to potentially sabotage operations. The malware contains hardcoded IP ranges specific to Israel and includes political messaging indicating its ideological motivations. Researchers at Darktrace found a critical flaw in the malware's encryption logic, rendering it currently non-functional but posing a significant threat if future versions are released without this flaw being addressed. The malware's targeting mechanism checks for the presence of water-related software and configuration files, and it has a USB propagation feature to spread to air-gapped systems. Although not operational now, the potential for damage remains high if the flaws are fixed. The malware is still in early development, with only partial functionality in its code. 23 sources 73

Extracted Entities

ZionSiphon Malware Hits Israeli Desalination Plants

The full story

Extracted Entities

Attack Types (1)

IP Addresses (5)

Malware (1)