Threat actor
MuddyWater
Tracked by CyberSIXT since 23 Feb · last activity 24 Jun
- CVEs exploited · attributed
- 0
- CVEs also mentioned · not attributed
- 0
- articles · all time
- 7
No articles in the last 45 daysThe latest: Infosecurity, Wed 24 Jun, 12:20 UTC.See the full timeline
CVEs
No CVE is named alongside MuddyWater in CyberSIXT coverage.
- Iranian MuddyWater disguises espionage as ransomware attacksInfosecurity
- MuddyWater Uses DLL Side Loading in Nine Nation EspionageThe Hacker News
- Iranian spies fake Chaos ransomware to steal data via TeamsSecurity Affairs
- MuddyWater hijacks Teams to spread Chaos ransomware false flagThe Hacker News
- Iran-linked MuddyWater fakes Chaos ransomware in 2026 breachSecurityWeek
- MuddyWater hits US banks with Dindoor backdoor via Deno runtimeThe Hacker News
- Iran linked MuddyWater turns to AI and Telegram C2 targeting MENADark Reading · first in our coverage