MuddyWater, an Iranian threat group, has recently started using a new, tailor-made backdoor to attack IT systems in the Middle East, according to threat intelligence firms Check Point and Sekoia. In the past, MuddyWater primarily compromised systems using legitimate remote management tools such as Atera Agent, Screen Connect, Tactical RMM, or SimpleHelp.
Source: Infosecurity Magazine – Information Security & IT Security