MuddyWater, the Iranian threat actor, has added a new C2 infrastructure named DarkBeatC2 to its arsenal. Despite occasionally switching to different remote administration tools or changing their C2 framework, MuddyWater’s overall methods and tactics remain consistent.
