๐จ CRITICAL THREAT ALERT: NUCLEAR INFRASTRUCTURE COMPROMISE ๐จ
๐ข Victim: Israeli Nuclear Power Plant (NPP) Infrastructure
๐คThreat Actor: CARDINAL (Russian Legion)
๐๏ธ Date: 2026-03-11 / 03-12
๐ฎ๐ฑ Country: Israel
The threat group "Cardinal" has released a screenshot allegedly showing internal communications from an Israeli Nuclear Power Plant. The actor claims to have persistent access to control systems and is exposing a "Unified Denial" strategy by plant officials. The evidence suggests that instead of reporting to the IAEA, officials are ordering the deletion of logs from critical servers (SRV-TLV-DC3 and SRV-BEER-01) to hide the breach.
The actor has identified specific IP ranges used in the attack (77.124.* / 79.179.*). Infrastructure teams must immediately verify if these IPs have interacted with SCADA or ICS networks.
#ThreatIntel #CyberSecurity #NuclearSecurity #Israel #CardinalAttack #ICS #SCADA #InfoSec #CriticalInfrastructure