MuddyWater Targets 100+ Gov Entities in MEA With Phoenix Backdoor
from DarkReading 22 October indexed on 22 October 2025 20:01The Iranian threat group is using a compromised mailbox accessed through NordVPN to send phishing emails that prompt recipients to enable macros.
Read more.
