Tag Archives: cyberattack Russia

Water, Iran and Minnesota

Leave a reply

At 8:42 a.m. on July 27, 2026  a public works operator was carrying out his daily check of the water system in Braham, Minnesota, when he noticed something was off: The water tower’s level was dropping, but the well that was supposed to refill it wasn’t responding. The water utility had been cyberattacked

On that day  the heat index neared 100 degrees and local officials urged residents to minimize their water use to prevent the town’s limited supply from running dry. “The water plant is currently offline for an unknown reason,” read a mass text message sent to locals as an outside specialist drove to Braham to investigate the issue. “The city has water in the water tower, however, that is a limited quantity.” Braham officials soon learned they weren’t alone. Dozens of communities across Minnesota were reporting that their water systems appeared to have been targeted, forcing some of them to declare a local state of emergency.

What had begun as local water outages and disruptions quickly became part of a federal investigation….The incidents had exposed a longstanding vulnerability in America’s infrastructure: Small water utilities like Braham increasingly rely on internet-connected automation but often lack the staff and funding to secure it. FBI was probing whether Iran-linked actors were behind the attacks, which had targeted more than 30 water systems in Minnesota.

Excerpt from Vera Bergengruen, The Cyberattack That Brought a Distant War to Small-Town Minnesota, WSJ, Aug. 8, 2026

Who Rents Your Phone Behind your Back: Airbnbs of the Internet

Leave a reply

On January 28, 2026, Google used a federal court order to get dozens of domains belonging to Ipidea removed from the internet… The mysterious Chinese company is an unsavory enterprise that sneaks unwanted and dangerous software on millions of phones, home computers and Android devices.

Control of the domains allowed Google to both shut down the public websites and technical back-end of the company, which operates using more than a dozen brand names. Google has also taken steps to remove hundreds of apps affiliated with the company from Android devices…The actions are expected to knock more than nine million Android devices off Ipidea’s network. They target a little known but important part of the internet that has increasingly worried cybersecurity experts.

Called “residential proxy” networks, these online services are built out of apps that are installed on virtually any type of internet-connected device—among them media players, PCs and mobile phones. Companies such as Ipidea then rent out access to the devices to paying customers who want to use the internet anonymously. The businesses operate like Airbnbs for network bandwidth, except the people whose devices are being rented out often don’t realize what is happening.

There are legitimate uses for Ipidea’s service, which can be used to surf the internet anonymously or to scrape websites for data…See Oxylabs…Residential proxies have also become a go-to service for criminals and state-sponsored hackers who want to cover their tracks, said John Hultquist, chief analyst with Google’s Threat Intelligence Group. “It’s a consumer issue and it’s a national-security issue at the same time,” he said. “It’s enabling some of the most serious threats to our country.”…

The Russia-linked hacking group known as Midnight Blizzard, blamed for a 2023 hack of Microsoft, used a residential proxy service to cover its tracks, Google said.

Excerpt from Robert McMillan, Google Aims Knockout Blow at Chinese Company Linked to Massive Cyber Weapon, WSH, Jan. 28, 2026