:

NEW LOTUS MALWARE TARGETS VENEZUELAN ENERGY FIRMS

AI DESK1 MIN READ
TUE, APR 21, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

A previously unknown data-wiping malware called Lotus was deployed in targeted attacks against Venezuelan energy and utility organizations last year. The discovery reveals a coordinated campaign against critical infrastructure.

Security researchers identified the Lotus malware through analysis of intrusions affecting multiple Venezuelan energy and utilities firms. The wiper was designed to destroy data on compromised systems, a tactic commonly associated with destructive cyberattacks against critical infrastructure. The attacks underscore growing threats to Latin American energy sectors. Venezuelan utilities face significant cyber risks given the country's geopolitical position and existing infrastructure vulnerabilities. Lotus shares characteristics with other data-wiping malware families but operates as a distinct threat. Researchers have not yet attributed the attacks to a specific threat actor, though the targeting pattern suggests organized coordination. Energy organizations are advised to review access logs for suspicious activity, implement robust backup strategies independent of primary networks, and monitor for indicators of compromise associated with the malware. The discovery adds to a growing catalog of destructive malware targeting utilities globally.

■ SOURCES

Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

A threat actor claims to have stolen employee databases from Microsoft Azure infrastructure across multiple Fortune 500 companies using compromised credentials. The stolen records are now being offered for sale.

4H AGOAI Desk

Pokémon Center notified customers in the UK and Germany of a data breach affecting personal and order information. The breach occurred through third-party logistics provider CEVA Logistics, which was compromised by hackers.

5H AGOSecurity Desk

Australia's major supermarket chains Coles and Woolworths have confirmed testing facial recognition technology in their stores, sparking privacy concerns from advocates who warn the systems could normalize mass surveillance.

8H AGOAI Desk

Breaches at shipping companies handling hardware wallet deliveries have compromised customer personal data, increasing risk of targeted physical theft and attacks against cryptocurrency owners.

11H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.