Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks

Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks. Actions to take today to protect against malicious activity include patching all systems, using antivirus software, identifying indicators of compromise, prioritizing known exploited vulnerabilities, training users to recognize and report phishing attempts, and using multi-factor authentication. MuddyWater, a group of Iranian government-sponsored APT actors, also known as Earth Vetala, MERCURY, Static Kitten, Seedworm, and TEMP.Zagros, are using open-source tools and strategies to conduct cyber espionage, deploy ransomware, and maintain persistence on victim networks. FBI, CISA, CNMF, NCSC-UK, and NSA recommend organizations to apply the mitigations in this advisory and review provided resources