MuddyWater Attacks Critical Infrastructure With Custom Malware and Improved Tactics

Cybersecuritynews •Tushar Subhra Dutta • December 3, 2025

MuddyWater, an Iran-aligned cyberespionage group also known as Mango Sandstorm, has launched a new, highly targeted campaign against critical infrastructure in Israel and Egypt. Active from September 2024 through March 2025, the group zeroed in on diverse sectors including engineering, utilities, local government, and technology. This operation marks a distinct evolution in their operational maturity, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MuddyWater Targets Critical Infrastructure in Israel and Egypt MuddyWater, an Iran-aligned cyberespionage group, has conducted a targeted campaign against critical infrastructure in Israel and Egypt from September 2024 to March 2025. The group focused on sectors such as engineering, utilities, local government, and technology, utilizing custom malware and improved tactics to enhance their operational effectiveness. 2 sources 67

Extracted Entities

MuddyWater Attacks Critical Infrastructure With Custom Malware and Improved Tactics

The full story

Extracted Entities

APT Groups (2)

Attack Types (1)

Countries (2)

Industries (2)