Hackers are targeting water systems via malware in the USA

  • Hackers may have already infected more than 30 municipal water system installations in the United States between 26 and 27 June 2026, and the attackers could be continuing their activity.
  • The materials say that the malware that infects the operator’s computer is used to redirect malicious traffic, while the attackers’ main goal is to take control of the computer’s network.
  • Company representatives claim that the attackers are likely using the vulnerabilities in the system to gain access to the PLC; however, the attackers’ malware is not yet fully understood.

Hackers may have already infected more than 30 municipal water system installations in the United States between 26 and 27 June 2026. After that, according to the report, the attackers could be using the malware to attack the systems’ management computers.

According to the materials, the attackers’ malware is designed to exploit vulnerabilities in computer systems used to manage water supply. The malware can also be used to steal information and send it to the attackers.

For example, the report notes that the hackers may use a malicious program that can be used to remotely control PLCs and send commands to them. The materials also state that the malware may be capable of intercepting data transmitted between the PLC and the operator’s computer.

In total, the report says that the hackers may have used the malware to attack systems in the United States, and the total number of infected systems could be much higher than 30.

The materials also say that the malware may be used to modify the IP address of the devices, which could allow the attackers to gain access to the internal network.

In addition, the report says that the malware can be used to send commands to the PLCs and to interfere with the normal operation of water treatment systems. The materials also state that the malware may be capable of causing damage to the systems.

The report concludes that the hackers could be using the malware to gain control over PLCs and to interfere with the operation of water supply systems.