Cyberinsider

MuddyWater Targets Israel with MuddyViper Malware

First seen 2 Dec 2025, 16:44 UTC • Cyberinsider

•30.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Iran-linked threat actor MuddyWater has launched a campaign against multiple Israeli sectors using a new backdoor called MuddyViper. The attacks also included one confirmed target in Egypt, employing custom tools to evade defenses and maintain persistence.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

9 entities, 18 inferred relationships (STIX 2.1).

Threat Actor (6)

Mango Sandstorm
MuddyWater
Seedworm
Static Kitten
Ta450
TEMP.Zagros

Technique (1)

Malware

Malware (1)

MuddyViper

Tool (1)

Fooder Loader

Relationships

Mango Sandstorm uses MuddyViper
MuddyWater uses MuddyViper
Seedworm uses MuddyViper
Static Kitten uses MuddyViper
Ta450 uses MuddyViper
TEMP.Zagros uses MuddyViper
Mango Sandstorm uses Fooder Loader
MuddyWater uses Fooder Loader
Seedworm uses Fooder Loader
Static Kitten uses Fooder Loader
Ta450 uses Fooder Loader
TEMP.Zagros uses Fooder Loader
Mango Sandstorm uses Malware
MuddyWater uses Malware
Seedworm uses Malware
Static Kitten uses Malware
Ta450 uses Malware
TEMP.Zagros uses Malware

Continue Reading

Iranian APT MuddyWater Uses Chaos Ransomware as a False Flag for Espionage MuddyWater Targets Critical Infrastructure in Israel and Egypt MuddyWater APT Launches New Rust Malware Against Israeli Targets MuddyWater APT Uses Rust-Based Implants in Middle East Espionage Campaign Iranian Cyber Espionage Targets US Academics and Policy Experts Iranian APT UNK_SmudgedSerpent Targets US Policy Experts with Phishing Attacks

MuddyWater Targets Israel with MuddyViper Malware

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading