---
title: "U.S. Drops $10M Bounty on Iranian Hackers: The IOControl Malware Threat"
description: U.S. offers $10M bounty for info on Iranian hackers using the IOControl malware to target critical infrastructure, posing a significant cybersecurity threat.
image: https://buzzmybiz.co/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20tense%20cybersecurity%20briefing%20room%20illuminated%20by%20harsh%20fluorescent%20lights%20A%20large%20digital%20screen%20at%20the%20front%20displays%20a%20map%20of%20the%20United%20States%20highlighting%20various%20critical%20infrastructure%20locations%20such%20as%20water%20treatment%20plant.jpeg
---

[Skip to content](https://buzzmybiz.co/blog/u.s.-drops-10m-bounty-on-iranian-hackers-the-iocontrol-malware-threat#main-content)

[![Buzz My Biz - Revolutionize your sales team](https://buzzmybiz.co/hs-fs/hubfs/bmb-2025-logo.png?width=200&height=200&name=bmb-2025-logo.png)](https://buzzmybiz.co/)

- [About](https://buzzmybiz.co/#about)
  
  Show submenu for About 
  
    - [Privacy Policy](https://buzzmybiz.co/privacy-policy)
    - [Terms of Use](https://buzzmybiz.co/terms-of-use)
- More Services
  
  Show submenu for More Services 
  
    - [Social Media Marketing](https://buzzmybiz.co/social-media-marketing)
    - [Digital Marketing](https://buzzmybiz.co/digital-marketing)
    - [AI-enhanced CRM](https://buzzmybiz.co/ai-enhanced-crm)
    - [VOIP Phone Systems](https://buzzmybiz.co/voip-phone-systems)

Open main navigation

Close main navigation

- [About](https://buzzmybiz.co/#about)
  
  Show submenu for About 
  
    - [Privacy Policy](https://buzzmybiz.co/privacy-policy)
    - [Terms of Use](https://buzzmybiz.co/terms-of-use)
- More Services
  
  Show submenu for More Services 
  
    - [Social Media Marketing](https://buzzmybiz.co/social-media-marketing)
    - [Digital Marketing](https://buzzmybiz.co/digital-marketing)
    - [AI-enhanced CRM](https://buzzmybiz.co/ai-enhanced-crm)
    - [VOIP Phone Systems](https://buzzmybiz.co/voip-phone-systems)
- [Contact](https://meetings.hubspot.com/buzzmybiz/meet-w-randy)

[Contact](https://meetings.hubspot.com/buzzmybiz/meet-w-randy)

 Jun 20, 2025 5:49:04 AM

# U.S. Drops $10M Bounty on Iranian Hackers: The IOControl Malware Threat

![Picture of Randy Cooper](https://app.hubspot.com/settings/avatar/c5808e6832ca5d4b1b61053f9a32046d) [Randy Cooper](https://buzzmybiz.co/blog/author/randy-cooper)

![The image depicts a tense cybersecurity briefing room illuminated by harsh fluorescent lights A large digital screen at the front displays a map of the United States highlighting various critical infrastructure locations such as water treatment plant](https://buzzmybiz.co/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20tense%20cybersecurity%20briefing%20room%20illuminated%20by%20harsh%20fluorescent%20lights%20A%20large%20digital%20screen%20at%20the%20front%20displays%20a%20map%20of%20the%20United%20States%20highlighting%20various%20critical%20infrastructure%20locations%20such%20as%20water%20treatment%20plant.jpeg?width=400&height=400&name=The%20image%20depicts%20a%20tense%20cybersecurity%20briefing%20room%20illuminated%20by%20harsh%20fluorescent%20lights%20A%20large%20digital%20screen%20at%20the%20front%20displays%20a%20map%20of%20the%20United%20States%20highlighting%20various%20critical%20infrastructure%20locations%20such%20as%20water%20treatment%20plant.jpeg)The U.S. State Department just put a $10 million bounty on the table for info on Iranian hackers tied to a nasty piece of malware called IOControl. This isn’t your average computer virus—it’s a cyberweapon targeting critical infrastructure like water systems, fuel pumps, and industrial controls in the U.S. and beyond. The hackers, linked to Iran’s Islamic Revolutionary Guard Corps (IRGC) through a group called CyberAv3ngers, are causing major headaches by messing with everything from routers to gas station systems. Let’s unpack what’s going on and why this matters.

#### What’s IOControl Malware and Why’s It Scary?

IOControl is no run-of-the-mill malware—it’s a sophisticated tool designed to infiltrate Internet of Things (IoT) and industrial control systems (ICS) like those running water treatment plants or fuel management systems. According to cybersecurity firm Claroty, this malware has hit devices from brands like Unitronics, D-Link, and Hikvision, often exploiting weak default passwords to take control. Once inside, it can run commands, steal data, or even shut down critical operations. The CyberAv3ngers, who the U.S. says are backed by Iran’s IRGC, have used it to target infrastructure in the U.S. and Israel, sometimes leaving messages like “Down with Israel” on compromised devices. It’s a bold move that’s less about chaos and more about showing they can hit where it hurts.

#### Who’s Behind This Cyber Mess?

The CyberAv3ngers are the main culprits, and they’re not just random hackers. The U.S. government ties them to Iran’s IRGC Cyber-Electronic Command, with key figures like Hamid Reza Lashgarian allegedly calling the shots. These folks have been linked to attacks since at least 2023, targeting everything from U.S. water utilities to Israeli-made tech. One nasty trick? They compromised hundreds of fuel management systems, potentially disrupting gas stations. The group’s tactics aren’t always super high-tech—often, they exploit basic security flaws like unchanged default passwords—but their impact is huge, especially when they’re aiming at critical infrastructure to flex Iran’s cyber muscle amid geopolitical tensions.

#### How to Protect Against This Cyber Threat

So, what can be done about this? For organizations running IoT or industrial systems, it’s time to tighten the screws. First, ditch those default passwords—seriously, it’s like leaving your front door wide open. Network segmentation is also key to keep hackers from jumping from one device to another. Regularly update device firmware and monitor for weird network traffic, especially on protocols like MQTT, which IOControl uses to hide its tracks. For the average person, this is a reminder to push companies and governments to prioritize cybersecurity—weak links in critical infrastructure affect us all. If you’re in the know about these hackers, the U.S.’s Rewards for Justice program is waiting for your tip, and that $10 million could be yours!

#### Why This Bounty Matters Now

This $10 million reward isn’t just about catching bad guys—it’s a signal that the U.S. is taking Iran’s cyber threats seriously, especially as tensions with Israel heat up. The CyberAv3ngers’ attacks, like those on Pennsylvania’s water utilities or gas stations, show they’re not just here to make a political statement anymore; they’re building a “red button” to disrupt infrastructure at will. With IOControl’s ability to linger undetected (some antivirus programs still miss it), the stakes are high. So, keep your eyes peeled, stay smart about security, and let’s hope this bounty helps track down these cyber saboteurs before they cause more chaos. Stay safe out there!

SOURCE: [https://therecord.media/us-offers-reward-for-iran-hacker-iocontrol-malware](https://therecord.media/us-offers-reward-for-iran-hacker-iocontrol-malware)

## Related posts

[![](https://buzzmybiz.co/hs-fs/hubfs/AI-Generated%20Media/Images/Cybercriminals%20Use%20AIGenerated%20TikTok%20Videos%20to%20Spread%20Infostealer%20Malware-3.jpeg?height=200&name=Cybercriminals%20Use%20AIGenerated%20TikTok%20Videos%20to%20Spread%20Infostealer%20Malware-3.jpeg)](https://buzzmybiz.co/blog/cybercriminals-use-tiktok-videos-to-spread-malware)

## [Cybercriminals Use TikTok Videos to Spread Malware](https://buzzmybiz.co/blog/cybercriminals-use-tiktok-videos-to-spread-malware)

![Picture of Randy Cooper](https://app.hubspot.com/settings/avatar/c5808e6832ca5d4b1b61053f9a32046d) [Randy Cooper](https://buzzmybiz.co/blog/author/randy-cooper) 

 May 30, 2025 8:57:11 AM

Cybercriminals are increasingly leveraging AI-generated videos on platforms like TikTok to...

[Read more](https://buzzmybiz.co/blog/cybercriminals-use-tiktok-videos-to-spread-malware)

[![](https://buzzmybiz.co/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20darkened%20office%20environment%20illuminated%20by%20the%20glow%20of%20multiple%20computer%20screens%20displaying%20various%20security%20alerts%20and%20code%20In%20the%20foreground%20a%20concerned%20IT%20professional%20a%20middleaged%20Asian%20man%20is%20intently%20reviewing%20a%20detailed%20cyb.jpeg?height=200&name=The%20image%20depicts%20a%20darkened%20office%20environment%20illuminated%20by%20the%20glow%20of%20multiple%20computer%20screens%20displaying%20various%20security%20alerts%20and%20code%20In%20the%20foreground%20a%20concerned%20IT%20professional%20a%20middleaged%20Asian%20man%20is%20intently%20reviewing%20a%20detailed%20cyb.jpeg)](https://buzzmybiz.co/blog/microsoft-sharepoint-zero-day-exploited-urgent-patch-issued-for-critical-flaws)

## [Microsoft SharePoint Zero-Day Exploited: Urgent Patch Issued for Critical Flaws](https://buzzmybiz.co/blog/microsoft-sharepoint-zero-day-exploited-urgent-patch-issued-for-critical-flaws)

![Picture of Randy Cooper](https://app.hubspot.com/settings/avatar/c5808e6832ca5d4b1b61053f9a32046d) [Randy Cooper](https://buzzmybiz.co/blog/author/randy-cooper) 

 Jul 26, 2025 8:40:08 AM

A New Threat Targets SharePoint Users Microsoft has issued an urgent security advisory addressing...

[Read more](https://buzzmybiz.co/blog/microsoft-sharepoint-zero-day-exploited-urgent-patch-issued-for-critical-flaws)

[![](https://buzzmybiz.co/hs-fs/hubfs/AI-Generated%20Media/Images/Massive%20JSFireTruck%20Malware%20Campaign%20Targets%20269k%20Websites.jpeg?height=200&name=Massive%20JSFireTruck%20Malware%20Campaign%20Targets%20269k%20Websites.jpeg)](https://buzzmybiz.co/blog/massive-jsfiretruck-malware-campaign-targets-269k-websites)

## [Massive JSFireTruck Malware Campaign Targets 269k Websites](https://buzzmybiz.co/blog/massive-jsfiretruck-malware-campaign-targets-269k-websites)

![Picture of Randy Cooper](https://app.hubspot.com/settings/avatar/c5808e6832ca5d4b1b61053f9a32046d) [Randy Cooper](https://buzzmybiz.co/blog/author/randy-cooper) 

 Jun 14, 2025 7:28:56 AM

A staggering 269,552 websites were infected with the JSFireTruck JavaScript malware between March...

[Read more](https://buzzmybiz.co/blog/massive-jsfiretruck-malware-campaign-targets-269k-websites)

[![Buzz My Biz - Revolutionize your sales team](https://buzzmybiz.co/hs-fs/hubfs/bmb-2025-logo.png?width=200&height=200&name=bmb-2025-logo.png "Buzz My Biz - Revolutionize your sales team")](https://buzzmybiz.co/)

📍2535 Gate Park Dr, Bethlehem GA 30620  
👔 Office: 678-389-9289  
📱 Mobile: 678-799-0152

![ama-pcm-logo-600x191](https://buzzmybiz.co/hs-fs/hubfs/ama-pcm-logo-600x191.png?width=300&name=ama-pcm-logo-600x191.png "ama-pcm-logo-600x191")

![10-102155_veteran-owned-veteran-owned-business-logo-vector-200x154](https://buzzmybiz.co/hs-fs/hubfs/10-102155_veteran-owned-veteran-owned-business-logo-vector-200x154.png?width=150&height=116&name=10-102155_veteran-owned-veteran-owned-business-logo-vector-200x154.png "10-102155_veteran-owned-veteran-owned-business-logo-vector-200x154")

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Randy Cooper",
    "url" : "https://buzzmybiz.co/blog/author/randy-cooper"
  },
  "dateModified" : "2025-07-19T14:24:10.188Z",
  "datePublished" : "2025-06-20T09:49:04.000Z",
  "headline" : "U.S. Drops $10M Bounty on Iranian Hackers: The IOControl Malware Threat",
  "image" : [ "https://buzzmybiz.co/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20tense%20cybersecurity%20briefing%20room%20illuminated%20by%20harsh%20fluorescent%20lights%20A%20large%20digital%20screen%20at%20the%20front%20displays%20a%20map%20of%20the%20United%20States%20highlighting%20various%20critical%20infrastructure%20locations%20such%20as%20water%20treatment%20plant.jpeg" ],
  "mainEntityOfPage" : {
    "@id" : "https://buzzmybiz.co/blog/u.s.-drops-10m-bounty-on-iranian-hackers-the-iocontrol-malware-threat",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://buzzmybiz.co/hubfs/t1-circle(500).png"
    },
    "name" : "TerminusOne.AI Inc"
  }
}
```