Scworld

MuddyWater Launches MuddyViper Backdoor Against Israeli Critical Infrastructure

First seen 3 Dec 2025, 22:41 UTC • Industrialcyber.Co

•80% similarity •48.1

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

MuddyWater, an Iran-linked threat actor, has initiated a campaign targeting critical infrastructure in Israel and one Egyptian entity, deploying a new backdoor named MuddyViper. The operation, which took place from September 30, 2024, to March 18, 2025, affected sectors such as technology, engineering, manufacturing, local government, and education.

ThreatCluster AI How this analysis works

Attack Flow

8 entities, 11 inferred relationships (STIX 2.1).

Threat Actor (2)

MuddyWater
OilRig

Technique (2)

Malware
T1059.001 - PowerShell

Malware (1)

MuddyViper

Affected Platform (1)

Windows

Tool (2)

Fooder
PowerShell

Relationships

MuddyWater uses MuddyViper
OilRig uses MuddyViper
MuddyWater uses Fooder
MuddyWater uses PowerShell
OilRig uses Fooder
OilRig uses PowerShell
MuddyWater uses Malware
MuddyWater uses T1059.001 - PowerShell
OilRig uses Malware
OilRig uses T1059.001 - PowerShell
MuddyWater related to Windows

Community

Browse all →

Tracked Entities in This Story

MuddyWater OilRig MuddyViper Windows Government Manufacturing Technology Transportation

MuddyWater Launches MuddyViper Backdoor Against Israeli Critical Infrastructure

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story