MUDDYWATER LAUNCHES RUSTYWATER RAT VIA SPEAR-PHISHING ACROSS MIDDLE EAST SECTORS

Summary from the TLDR InfoSec newsletter

Iranian threat actor MuddyWater has been attributed to spear-phishing campaigns targeting diplomatic, maritime, financial, and telecom entities in the Middle East using a new Rust-based implant called RustyWater (also known as Archer RAT/RUSTRIC). The malware, delivered via malicious Word documents with VBA macros, establishes registry persistence and supports asynchronous C2 communication for file operations and command execution. This marks MuddyWater's continued evolution away from PowerShell and VBS loaders toward more structured, modular RAT capabilities.