Ta450 is a apt_group tracked across 8 threat clusters and 8 intelligence report mentions on ThreatCluster. First observed November 5, 2025; most recent activity May 6, 2026.
In early 2026, the Iranian APT group MuddyWater, affiliated with the Ministry of Intelligence and Security, executed a sophisticated cyber operation disguised as a Chaos ransomware attack. Utilizing social engineering…
The Iranian APT group MuddyWater has intensified cyber-espionage activities in early 2026, specifically targeting Israeli government and infrastructure. They have introduced a new Rust-based remote access trojan named…
Amazon's Threat Intelligence team has identified a trend where nation-state actors utilize cyber operations to facilitate physical military strikes, termed 'cyber-enabled kinetic targeting.' This new operational model…
The Iran-linked MuddyWater APT group has launched a spear-phishing campaign targeting various sectors in the Middle East, including diplomatic, maritime, financial, and telecom entities. The campaign employs icon…
Amazon's threat intelligence teams have identified a trend where nation-state actors are using cyber operations to enhance physical military strikes, termed 'cyber-enabled kinetic targeting.' This new operational model…
Iran-linked threat actor MuddyWater has launched a campaign against multiple Israeli sectors using a new backdoor called MuddyViper. The attacks also included one confirmed target in Egypt, employing custom tools to…
Between June and August 2025, the Iranian-linked APT UNK_SmudgedSerpent conducted targeted phishing campaigns against US academics and foreign policy experts. The group employed techniques such as credential theft and…
Between June and August 2025, a cyber group identified as UNK_SmudgedSerpent targeted U.S. academics and foreign policy experts focused on Iran. The attackers initiated contact through seemingly benign conversations to…