The MuddyWater group, known for its affiliation with the Iranian state, has been linked to a new cyber operation that utilizes compromised email accounts to spread a sophisticated backdoor known as Phoenix. This campaign primarily targets high-value organizations within the Middle East and North Africa, aiming to enhance intelligence gathering capabilities.
The attackers have successfully infiltrated more than 100 government entities, reflecting a strategic choice to focus on organizations that could offer valuable information. Their tactics indicate a well-planned effort to compromise secure networks, potentially leading to significant security breaches in the affected nations. The implications of such attacks raise concerns about national security and the protection of critical infrastructures across the region.
👉 Pročitaj original: The Hacker News