Threat Intelligence / Actor / MuddyWater (Mango Sandstorm)

MuddyWater (Mango Sandstorm)

Nation: Iran · 1 tracked threat(s) · Categories: APT

Also known as: "[\"Mango Sandstorm\", \"MERCURY\", \"Static Kitten\", \"Seedworm\", \"Earth Vetala\", \"TEMP.Zagros\", \"TA450\"]", MuddyWater, Earth Vetala, MERCURY, Static Kitten, Seedworm

Tracked threats

CHAR Rust Backdoor + GhostFetch/GhostBackDoor/HTTP_VIP — Iran MOIS-Linked MuddyWater AI-Assisted Malware Suite with Telegram Bot C2 — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence