CERT24Iran-linked MuddyWater Poses as a Ransomware Gang for EspionageLoading data…
CERT24Threat Observatory
Period

Iran-linked MuddyWater Poses as a Ransomware Gang for Espionage

According to analysis by NCC Group, MuddyWater, a cyber espionage group associated with Iran’s Ministry of Intelligence and Security, posed as the Chaos ransomware group to conceal its espionage activity. The operation included extortion notes, victim negotiation channels and a listing on the Chaos leak site to create the appearance of a financially motivated attack.

← Back to intelligence

Iran-linked MuddyWater Poses as a Ransomware Gang for Espionage

According to analysis by NCC Group, MuddyWater, a cyber espionage group associated with Iran’s Ministry of Intelligence and Security, posed as the Chaos ransomware group to conceal its espionage activity. The operation included extortion notes, victim negotiation channels and a listing on the Chaos leak site to create the appearance of a financially motivated attack.