Back Gbhackers

Boggy Serpens Hits Diplomats, Critical Infrastructure in Espionage Waves

Gbhackers •Mayura Kathir • March 18, 2026

Boggy Serpens, also known as MuddyWater, has escalated its cyberespionage operations over the past year, focusing on diplomats and critical infrastructure organizations in a coordinated, multi-wave campaign. Boggy Serpens has moved beyond its earlier noisy, high-volume phishing style to prioritize persistence and stealth in campaigns across the Middle East, Europe, the Caucasus, Central and Western […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Boggy Serpens Escalates Cyberespionage Against Diplomats and Infrastructure The Iranian nation-state group Boggy Serpens, also known as MuddyWater, has intensified its cyberespionage activities, targeting diplomatic missions, energy companies, maritime operators, and financial institutions. This group, attributed to Iran's Ministry of Intelligence and Security (MOIS), has shifted its tactics from high-volume phishing to more stealthy and persistent methods. The campaigns have been particularly focused on regions including the Middle East, Europe, and the Caucasus. The attacks have raised significant concerns among affected organizations, although specific numbers of victims and technical details such as CVEs or tools used were not provided in the articles. The operations are ongoing, indicating a sustained threat level. The group has been active since at least 2017, suggesting a long-term strategic approach to cyberespionage. Current advisories recommend heightened vigilance among targeted sectors. 2 sources 72

Extracted Entities

Boggy Serpens Hits Diplomats, Critical Infrastructure in Espionage Waves

The full story

Extracted Entities

APT Groups (2)

Attack Types (1)

MITRE ATT&CK (1)