POWERSTATS
Description
(Palo Alto) MuddyWater attacks are characterized by the use of a slowly evolving PowerShell-based first stage backdoor we call “POWERSTATS”.
Names
| Name |
|---|
| POWERSTATS |
| Valyria |
Category
Malware
Type
- Backdoor
Information
- https://unit42.paloaltonetworks.com/unit42-muddying-the-water-targeted-attacks-in-the-middle-east/
- https://www.clearskysec.com/muddywater-operations-in-lebanon-and-oman/
- https://www.fireeye.com/blog/threat-research/2018/03/iranian-threat-group-updates-ttps-in-spear-phishing-campaign.html
- https://blog.malwarebytes.com/threat-analysis/2017/09/elaborate-scripting-fu-used-in-espionage-attack-against-saudi-arabia-government_entity/
- https://reaqta.com/2017/11/muddywater-apt-targeting-middle-east/
- https://blog.trendmicro.com/trendlabs-security-intelligence/campaign-possibly-connected-muddywater-surfaces-middle-east-central-asia/
Mitre Attack
Malpedia
Alienvault Otx
Other Information
Uuid
2bde4b8c-ab64-4510-a248-d7eabe428a8a
Last Card Change
2022-12-29