‘CanisterWorm’ Springs Wiper Attack Targeting Iran

A financially motivated data theft and extortion group known as TeamPCP is using a worm called CanisterWorm to wipe data on infected systems that use Iran’s time zone or have Farsi set as the default language.