MuddyWater Cyberespionage Group Evolves with New Tools

The cyberespionage group MuddyWater has adopted new tactics and tools, including a custom backdoor called MuddyViper and a loader named Fooder, to enhance stealth and persistence. The group, known for targeting government agencies and critical infrastructure, has shown significant improvements in its operational maturity. ESET researchers noted the use of memory-only loaders and credential stealers, indicating a more sophisticated approach despite some detectable elements remaining.