Csoonline
MuddyWater APT Uses Rust-Based Implants in Middle East Espionage Campaign
First seen 12 Jan 2026, 11:39 UTC
•



•81% similarity
•36.9
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The Iran-linked MuddyWater APT group has launched a spear-phishing campaign targeting various sectors in the Middle East, including diplomatic, maritime, financial, and telecom entities. The campaign employs icon spoofing and malicious Word documents to deploy Rust-based implants, which offer capabilities such as asynchronous command and control, anti-analysis, and modular post-compromise expansion.
ThreatCluster AI