Source: OTX
Date: 2022-12-13 08:49:37
Threat actor: MuddyWater
Affected sector: Government
Attack vector: Phishing
Severity: High
Confidence: Low
MITRE ATT&CK techniques: T1566,T1071,T1053
File hash (FileHash-SHA256): 7e7292b5029882602fe31f15e25b5c59e01277abaab86b29843ded4aa0dcbdd1
Description:
The Iran-linked MuddyWater threat actor has been observed targeting several countries in the Middle East as well as Central and West Asia as part of a new spear-phishing activity.

"The campaign has been observed targeting Armenia, Azerbaijan, Egypt, Iraq, Israel, Jordan, Oman, Qatar, Tajikistan, and the United Arab Emirates," Deep Instinct researcher Simon Kenin said in a technical write-up.

MuddyWater, also called Boggy Serpens, Cobalt Ulster, Earth Vetala, Mercury, Seedworm, Static Kitten, and TEMP.Zagros, is said to be a subordinate element within Iran's Ministry of Intelligence and Security (MOIS).