Seedworm is a apt_group tracked across 6 threat clusters and 13 intelligence report mentions on ThreatCluster. First observed November 19, 2025; most recent activity May 11, 2026.
In early 2026, the Iranian APT group MuddyWater, affiliated with the Ministry of Intelligence and Security, executed a sophisticated cyber operation disguised as a Chaos ransomware attack. Utilizing social engineering…
Iran's internet blackout has reached day 18, affecting the vast majority of the population, which has been offline for over 400 hours. The Iranian government imposed these restrictions following US-Israel missile…
The Iranian APT group MuddyWater has intensified cyber-espionage activities in early 2026, specifically targeting Israeli government and infrastructure. They have introduced a new Rust-based remote access trojan named…
Amazon's Threat Intelligence team has identified a trend where nation-state actors utilize cyber operations to facilitate physical military strikes, termed 'cyber-enabled kinetic targeting.' This new operational model…
Amazon's threat intelligence teams have identified a trend where nation-state actors are using cyber operations to enhance physical military strikes, termed 'cyber-enabled kinetic targeting.' This new operational model…
Iran-linked threat actor MuddyWater has launched a campaign against multiple Israeli sectors using a new backdoor called MuddyViper. The attacks also included one confirmed target in Egypt, employing custom tools to…