Iranian APT Actors Targeting PLCs: Impacts and Mitigations for Water and Wastewater Systems

United States

During this webinar, EPA will address the active cyber threat posed by Iranian affiliated advanced persistent threat (APT) actors targeting internet exposed programmable logic controllers (PLCs) across U.S. critical infrastructure, including water and wastewater systems. As detailed in the April 2026 Joint Cybersecurity Advisory (AA26 097A), these actors have been exploiting internet connected PLCs and impacting operational technology (OT) systems. EPA will provide an overview of this threat activity, including actor tactics, techniques, and indicators of compromise, and discuss the real-world impacts to critical infrastructure sectors. EPA will then walk through the recommended mitigations to reduce risk and highlight the resources and no cost services available to help water and wastewater utilities implement these protections and strengthen their cyber resilience against this ongoing threat.