Tag: ghostbackdoor

2 Attack Reports | 0 Vulnerabilities

Attack reports

Boggy Serpens Threat Assessment

The Iranian threat group Boggy Serpens, linked to the Ministry of Intelligence and Security, has refined its cyberespionage tactics to focus on trusted relationship compromises and multi-wave targeting of strategic organizations. The group combines social engineering with AI-enhanced malware for lo…
social engineering
cyberespionage
maritime
critical infrastructure
energy
udpgangster
ghostbackdoor
phoenix
iranian
2026-03-17
ai-enhanced malware
blackbeard
lamporat
nuso
trusted relationship compromise
Published: March 17, 2026
Linked vulnerabilities : CVE-2026-1731 (CVSS 9.9)
Downloadable IOCs: 35

Operation Olalampo: Inside MuddyWater's Latest Campaign

MuddyWater APT has launched Operation Olalampo, targeting organizations in the MENA region. The campaign involves new malware variants, including a Rust backdoor called CHAR, downloaders GhostFetch and HTTP_VIP, and an advanced backdoor GhostBackDoor. Notably, the group is using Telegram bots for c…
apt
c2
post-exploitation
ai-assisted
telegram bot
rust backdoor
2026-02-23
charmpower
ghostbackdoor
ghostfetch
http_vip
mena
operation olalampo
Published: February 23, 2026
Downloadable IOCs: 14
Click here to see more Attack Reports