Threat of ZionSiphon malware downplayed

Dragos technical lead malware analyst Jimmy Wylie said threat groups that had launched intrusions targeting critical infrastructure, such as water treatment facilities, are more concerning compared with the recently reportedZionSiphon malwaretargeting Israeli water facilities, reportsCyberScoop.Media outlets and threat intelligence firms have hyped the dangers of ZionSiphon which targets industrial control systems and operational technology environments and aims to poison water supplies and disrupt chlorine levels even though the malware posed no threat to water plants in Israel or elsewhere, according to Wylie, who emphasized the need to prioritize more tangible threats.”The code is broken and shows little to no knowledge of dam desalination or ICS protocols,” Wylie wrote. Researchers at Darktrace, the firm that first discovered the malware, noted that the sample appeared to have an incorrect configuration and is dysfunctional. AI appeared to be used in generating most of the code, which led to errors and fake configuration files for chlorine manipulation.