Iranian APT group ‘MuddyWater’ Adds Exploits to Their Arsenal

– ClearSky Cyber Security

In recent months, there has been considerable unrest in the Iranian cybersphere. Highly sensitive data about Iranian APT groups were leaked, exposing abilities, strategies, and attack tools. The main medium for this leak was a telegram channel.

The first leak uncovered attack frameworks and web shells of APT-34 (Known as OilRig group). This was followed by another leak that that exposed previously unknown details (such as compromised C2 servers) regarding the operation of MuddyWater. Further, it detailed the modus operandi of RANA – a cyber division of the Iranian Ministry of Intelligence (MOIS).

However, Clearsky’s Threat Intelligence…