https://brandefense.io/blog/muddywater-apt-2025/
Nov 20, 2025 - Muddywater APT is an Iran-linked espionage group targeting government, telecom, defense, and NGOs across the Middle East, Europe, and North America.
global reachmuddywateriranlinkedespionage
https://www.trendmicro.com/it_it/research/18/c/campaign-possibly-connected-muddywater-surfaces-middle-east-central-asia.html
We discovered a new campaign targeting organizations in Turkey, Pakistan and Tajikistan that has some similarities with an earlier campaign named MuddyWater,...
middle easttrend micropotentialmuddywatercampaign
https://thehackernews.com/2023/06/from-muddyc3-to-phonyc2-irans.html
Iranian state-sponsored group, MuddyWater, deploys new PhonyC2 framework in targeted cyber attacks
iranmuddywaterevolves
https://www.csoonline.com/article/644268/command-and-control-framework-phonyc2-attributed-to-irans-muddywater-group.html
Jun 30, 2023 - PhonyC2 was used to exploit the log4j vulnerability in the Israeli software SysAid, the attack against Israel’s Technion institute, and the ongoing attack...
commandcontrolframeworkattributedmuddywater