MuddyViper Malware Emerges in Iran-Israel Cyber Conflict

[Sherlock]

Hey everyone — I recently read a concerning cybersecurity report about a new wave of attacks on Israeli organizations, and I think it’s worth discussing. The findings highlight a newly discovered backdoor called MuddyViper, used by an Iran-linked hacking group to penetrate multiple sectors in Israel.

Here’s what we know so far (and what remains uncertain):

• A new backdoor called MuddyViper was used by an Iran-linked hacking group.
• Multiple Israeli sectors were targeted, including tech, government, utilities, and academia.
• Attackers used phishing emails and malicious PDFs to gain access.
• A disguised loader (posed as a simple game) was used to install the malware.
• MuddyViper enables remote access, data theft, and long-term persistence.
• The campaign ran for months, showing clear planning.
• One victim was outside Israel, suggesting regional spread.
• The attackers used legitimate IT tools, making detection difficult.