Darktrace researchers have identified ZionSiphon, a purpose-built malware targeting Israeli water treatment and desalination OT/ICS systems. The malware is designed to manipulate chlorine dosing and hydraulic pressure, actions that could compromise water safety and damage physical infrastructure. A logic flaw currently prevents execution, but the sabotage payload is complete and requires only a minor code correction to become operational, making this a credible near-term threat for water sector operators.