Tag: reverse tunneling

2 Attack Reports | 0 Vulnerabilities

Attack reports

MuddyWater: Snakes by the riverbank

MuddyWater, an Iran-aligned cyberespionage group, has been targeting critical infrastructure in Israel and Egypt with custom malware and improved tactics. The campaign uses previously undocumented tools like the Fooder loader and MuddyViper backdoor to enhance defense evasion and persistence. Foode…
iran
credential theft
cyberespionage
defense evasion
critical infrastructure
blub
lp-notes
go-socks5
muddyviper
ce-notes
fooder
reverse tunneling
2026-01-03
fooder loader
muddyviper backdoor
Published: January 3, 2026
Downloadable IOCs: 9

UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager

A Chinese-nexus advanced persistent threat actor, UAT-9686, is actively targeting Cisco AsyncOS Software for Secure Email Gateway and Secure Email and Web Manager. The campaign, ongoing since late November 2025, exploits non-standard configurations to execute system-level commands and deploy a pers…
backdoor
apt
chinese threat actor
email security
2025-12-17
aquapurge
aquashell
aquatunnel
cisco asyncos
log purging
reverse tunneling
Published: December 17, 2025
Downloadable IOCs: 4
Click here to see more Attack Reports