CanisterWorm turns destructive as TeamPCP deploys Iran-focused Kubernetes wiper
VPN Central [Unofficial]
March 25, 2026
TeamPCP has taken a more aggressive step in its cloud attacks. Researchers say the group now uses a destructive payload that wipes systems when it detects signs of an Iranian environment, while non-Iranian targets get the CanisterWorm backdoor instead. That change matters because it shows a clear split in the attacker’s goals. In one case, […]
The post CanisterWorm turns destructive as TeamPCP deploys Iran-focused Kubernetes wiper appeared first on VPN Central.
Discussion in the ATmosphere