As part of a recent attack effort, the Iranian nation-state actor MuddyWater was detected utilizing a backdoor that had never been seen before. This marks a departure from its well-known strategy of utilizing genuine remote monitoring and management (RMM) software to maintain permanent access.
Independent research conducted by cybersecurity companies Check Point and Sekoia, who have nicknamed the malware strains BugSleep and MuddyRot, respectively, indicates as much.
The legal Atera remote monitoring and management program (RRM) was not used by MuddyWater as a validator this time around, in contrast to prior efforts, according to a report provided with The Hacker News by Sekoia read more about Iranian Hackers Deploy New BugSleep Backdoor in Middle East Cyber Attacks.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.