ThreatCluster

MuddyWater APT Uses RustyWater Malware in Spear-Phishing Campaign

First seen 9 Jan 2026, 19:00 UTC •Cybersecuritynews •86% similarity •35

Article Content

Browse articles
ThreatCluster

The Iran-linked MuddyWater APT group has initiated a spear-phishing campaign targeting various sectors including diplomatic, maritime, financial, and telecom across the Middle East. They are utilizing weaponized Word documents to deploy a new Rust-based malware known as RustyWater, marking a shift from their previous PowerShell and VBS tools.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

MuddyWater RustyWater Financial