MuddyWater APT Uses RustyWater Malware in Spear-Phishing Campaign
Article Content
Browse articles 
The Iran-linked MuddyWater APT group has initiated a spear-phishing campaign targeting various sectors including diplomatic, maritime, financial, and telecom across the Middle East. They are utilizing weaponized Word documents to deploy a new Rust-based malware known as RustyWater, marking a shift from their previous PowerShell and VBS tools.
Ask AI about this cluster
Answers cite the sources they use
Updated 242d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track MuddyWater and RustyWater in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Cyber Espionage Escalates in Europe Amid Geopolitical Tensions Cyberattacks on the public sector have surged by 114% in Europe over the past 30 months, with an average of 2,563 attacks per week per organization. This increase is attributed to rising geopolitical tensions, particularly related to the ongoing conflict between Russia and Ukraine. Check Point Research reports that… 
Iranian Espionage Campaign UNK_SmudgedSerpent Targets Academics Proofpoint has identified an Iranian-linked espionage group named UNK_SmudgedSerpent, which has been active since mid-2025. This group targets academics and foreign policy experts, utilizing highly targeted phishing techniques and credential theft operations. The campaign began with benign emails discussing Iran's…