Threat Intelligence Report

MuddyWater Exposed: Inside an Iranian APT operation

📅 March 5, 2026 📰 ctrlaltintel.com 🔍 13 CVE(s) referenced

Repeated operational security failures by Iran’s MuddyWater APT exposed a sprawling, multi-C2 espionage campaign targeting organizations across the Middle East, Europe, and the US, leveraging both public and custom exploits, blockchain-based C2 resolution, and aggressive data exfiltration.

vendor

CVE-2022-42475, CVE-2025-68613, CVE-2025-52691, CVE-2026-1281, CVE-2025-34291, CVE-2024-55591, CVE-2025-5777, CVE-2025-54068, CVE-2024-5559, CVE-2025-55182, CVE-2025-9316, CVE-2024-23113, CVE-2026-1731

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle