Iran’s MuddyWater Hackers Get a Stealth Upgrade
The MuddyWater hacking group has deployed new custom malware, including the “MuddyViper” backdoor, in a campaign from late 2024 to mid-2025. This represents a significant evolution towards more advanced, stealth-focused tradecraft for the historically noisy threat actor.