Iran-linked MuddyWater APT reportedly breached organizations across 9 countries in Q1 2026 using DLL sideloading, PowerShell implants, Chromium credential theft, and SOCKS5 tunneling

[technadu@infosec.exchange]

Iran-linked MuddyWater APT reportedly breached organizations across 9 countries in Q1 2026 using DLL sideloading, PowerShell implants, Chromium credential theft, and SOCKS5 tunneling.
Researchers say signed Fortemedia & SentinelOne binaries were abused for stealth.

Iran-Linked MuddyWater Group Breached Organizations in 9 Countries in Q1 2026, Including Major Electronics Maker

Iran-linked MuddyWater abused signed binaries to breach global targets, including a major Korean electronics firm.

TechNadu (www.technadu.com)

#CyberSecurity #ThreatIntel #APT #InfoSec