‘CanisterWorm’ Springs Wiper Attack Targeting Iran

A financially motivated data theft and extortion group has unleashed a worm that spreads through poorly secured cloud services. The malware wipes data on infected systems that use Iran's time zone or have Farsi set as the default language.