Tag: muddyviper

2 Attack Reports | 0 Vulnerabilities

Attack reports

MuddyWater: Snakes by the riverbank

MuddyWater, an Iran-aligned cyberespionage group, has been targeting critical infrastructure in Israel and Egypt with custom malware and improved tactics. The campaign uses previously undocumented tools like the Fooder loader and MuddyViper backdoor to enhance defense evasion and persistence. Foode…

credential theft

defense evasion

critical infrastructure

reverse tunneling

muddyviper backdoor

Published: January 3, 2026

Downloadable IOCs: 9

Snakes by the riverbank

ESET researchers have identified new MuddyWater activity targeting organizations in Israel and Egypt. The Iran-aligned cyberespionage group deployed custom tools to improve defense evasion and persistence, including a Fooder loader to execute the MuddyViper backdoor. The campaign demonstrates a mor…

defense evasion

critical infrastructure

Published: December 2, 2025

Downloadable IOCs: 9

Click here to see more Attack Reports