ChainShell: MuddyWater’s Russian MaaS Link

JUMPSEC has uncovered conclusive evidence that Iranian state actor MuddyWater is actively leveraging Russian-developed TAG-150 CastleRAT malware-as-a-service, gaining advanced stealth and credential theft capabilities via a commercial cybercrime platform, which significantly complicates attribution and escalates the threat to Israeli and Western defense, energy, and government sectors.