Search all coverage

Threat actor

MuddyWater

MITRE G0069 Malpedia IR

Tracked by CyberSIXT since May 6, 2026 · last activity Jun 24, 2026

Linked incidents

incident closed 4 articles

Iranian MuddyWater group stages false‑flag ransomware attack

Coverage timeline

Iranian MuddyWater disguises espionage as ransomware attacks
www.infosecurity-magazine.com · Jun 24, 2026
MuddyWater Uses DLL Side Loading in Nine Nation Espionage
thehackernews.com · May 26, 2026
Iranian spies fake Chaos ransomware to steal data via Teams
securityaffairs.com · May 6, 2026
MuddyWater hijacks Teams to spread Chaos ransomware false flag
thehackernews.com · May 6, 2026
Iran-linked MuddyWater fakes Chaos ransomware in 2026 breach
www.securityweek.com · May 6, 2026