Adversary: Iran

Advisory AA23-335A: CyberAv3ngers exploit Unitronics controllers at water utilities

Bottom line: Iranian Government Islamic Revolutionary Guard Corps affiliated actors defaced and disrupted programmable logic controllers at small water systems using default credentials on internet-exposed devices. Change default passwords and remove operational technology from the public internet as the first control.

Automated analysis from cited open sources.