MuddyWater Expands Its Arsenal with BugSleep Malware

MuddyWater, an Iranian threat group, has substantially escalated its operations in Israel since the onset of the Israel-Hamas conflict in October 2023. The group employs phishing campaigns to target various organizations. Recently, MuddyWater campaigns have led to the deployment of a new, undocumented backdoor known as BugSleep, which executes commands from the threat actors and facilitates the transfer of files between compromised machines and C&C servers. This backdoor is continuously undergoing development and enhancement.