MuddyWater APT Weaponizing Word Documents to Deliver 'RustyWater' Toolkit Evading AV ...

Cybersecuritynews • January 9, 2026

Share: View original

The Iran-linked MuddyWater Advanced Persistent Threat group has launched a sophisticated spear-phishing campaign targeting diplomatic, maritime ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MuddyWater APT Uses RustyWater Malware in Spear-Phishing Campaign The Iran-linked MuddyWater APT group has initiated a spear-phishing campaign targeting various sectors including diplomatic, maritime, financial, and telecom across the Middle East. They are utilizing weaponized Word documents to deploy a new Rust-based malware known as RustyWater, marking a shift from their previous PowerShell and VBS tools. 2 sources 35

Extracted Entities

APT Groups (1)

Attack Types (1)

Countries (1)

MITRE ATT&CK (1)

T1566 - Spearphishing Attachment

Tools (1)

RustyWater Toolkit