Two Israeli organizations have been targeted by Iranian state-backed threat operation MuddyWater, also known as Mango Sandstorm and Static Kitten, in a new spear-phishing campaign that distributed N-able’s Advanced Monitoring Agent remote administration tool, according to The Hacker News. MuddyWater’s latest campaign, which was similar to the group’s previous attacks deploying other remote access tools, involved phishing emails using an official Israeli Civil Service Commission memo as a lure, which redirected targets to an archive hosted on the new Storyblok file-sharing service, which featured an infection-initiating LNK file, an executable for Advanced Monitoring Agent execution, and hidden files, a report from Deep Instinct revealed.

Source: SC Magazine