Cyberinsider

MuddyWater Targets Israel with MuddyViper Malware

First seen 2 Dec 2025, 16:44 UTC • •30.6

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Iran-linked threat actor MuddyWater has launched a campaign against multiple Israeli sectors using a new backdoor called MuddyViper. The attacks also included one confirmed target in Egypt, employing custom tools to evade defenses and maintain persistence.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 241d ago How this analysis works

Threat Graph

9 entities, 18 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Threat Actor (6)

Mango Sandstorm
MuddyWater
Seedworm
Static Kitten
TA450
TEMP.Zagros

Technique (1)

Malware

Malware (1)

MuddyViper

Tool (1)

Fooder Loader

Relationships

Mango Sandstorm uses MuddyViper
MuddyWater uses MuddyViper
Seedworm uses MuddyViper
Static Kitten uses MuddyViper
TA450 uses MuddyViper
TEMP.Zagros uses MuddyViper
Mango Sandstorm uses Fooder Loader
MuddyWater uses Fooder Loader
Seedworm uses Fooder Loader
Static Kitten uses Fooder Loader
TA450 uses Fooder Loader
TEMP.Zagros uses Fooder Loader
Mango Sandstorm uses Malware
MuddyWater uses Malware
Seedworm uses Malware
Static Kitten uses Malware
TA450 uses Malware
TEMP.Zagros uses Malware

Following this threat?

Track Mango Sandstorm and MuddyViper in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

MuddyWater Targets Israel with MuddyViper Malware

Article Content

More articles in this cluster (2)

Threat Graph

Following this threat?

Extracted Entities (10)

APT Groups (6)

Attack Types (1)

Countries (1)

Malware (1)

Tools (1)