Source: OTX
Date: 2022-12-13 08:49:37
Threat actor: MuddyWater
Affected sector: Government
Attack vector: Phishing
Severity: High
Confidence: Low
MITRE ATT&CK techniques: T1566,T1071,T1053
File hash (FileHash-SHA256): f511bdd471096fc81dc8dad6806624a73837710f99b76b69c6501cb90e37c311
Description:
The Iran-linked MuddyWater threat actor has been observed targeting several countries in the Middle East as well as Central and West Asia as part of a new spear-phishing activity.

"The campaign has been observed targeting Armenia, Azerbaijan, Egypt, Iraq, Israel, Jordan, Oman, Qatar, Tajikistan, and the United Arab Emirates," Deep Instinct researcher Simon Kenin said in a technical write-up.

MuddyWater, also called Boggy Serpens, Cobalt Ulster, Earth Vetala, Mercury, Seedworm, Static Kitten, and TEMP.Zagros, is said to be a subordinate element within Iran's Ministry of Intelligence and Security (MOIS).