Threat actorIranTracked since 2026-05

DinDoor Operators

Also known as:MuddyWaterSeedwormStatic KittenMercuryTEMP.ZagrosTsundere Botnet operators

As of 2026-05-30, DinDoor Operators is a Iran-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as MuddyWater, Seedworm, Static Kitten, Mercury.

Tracked threats

11 high

First seen

2026-052026-05-26

Last seen

2026-052026-05-26

ATT&CK techniques

—No mapped techniques yet

Related CVEs

0None referenced

Attribution

IranNation or origin