MuddyWater
Earth VetalaMERCURYStatic KittenSeedwormTEMP.ZagrosMango SandstormTA450MuddyKrill
IranMOIS-linked (Iranian Ministry of Intelligence)
MuddyWater is a cyber espionage group assessed to be a subordinate element within Iran's Ministry of Intelligence and Security (MOIS). Since at least 2017, MuddyWater has targeted a range of government and private organizations across sectors, including telecommunications, local government, finance, defense, and oil and natural gas organizations, in the Middle East (specifically the UAE and Saudi Arabia), Asia, Africa, Europe, and North America.
MITRE ATT&CK Techniques
T1003.001T1003.004T1003.005T1016T1027.003T1027.004T1027.010T1033T1036.005T1041T1047T1049T1053.005T1057T1059.001T1059.003T1059.005T1059.006T1059.007T1071.001T1074.001T1082T1083T1087.002T1090T1090.002T1102.002T1104T1105T1113T1132.001T1137.001T1140T1190T1203T1204.001T1204.002T1204.004T1210T1218.003T1218.005T1218.011T1219.002T1518T1518.001T1534T1547.001T1548.002T1552.001T1555T1555.003T1559.001T1559.002T1560.001T1566T1566.001T1566.002T1567.002T1571T1573.001T1574.001T1583.001T1583.006T1588.001T1588.002T1590.004T1684.001T1685
Associated Malware
ConnectWiseCrackMapExecEmpireFooderKoadicLP-NotesLaZagneMimikatzMoriMuddyViperOut1POWERSTATSPowGoopPowerSploitRcloneRemoteUtilitiesRustyWaterSHARPSTATSSTARWHALESmall SieveTsundere Botnet
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.