MuddyC2Go
- First seen
- 2022-05-18 00:00:00
- Malware type
- rat, trojan
- Family
- Malware family
- Profile updated
- 2026-07-07 14:38:48
Targeted industries: government-and-public-sector financial-services technology-and-telecommunications
Targeted regions: country_code:us country_code:ru
Context
MuddyC2Go is a remote access Trojan known to be used by the MuddyWater threat actor group. It primarily targets government, financial services, and tech sectors, facilitating command and control operations.
Detection coverage
- 1 YARA rules
Detection rules
- SEKOIA_Apt_Muddywater_Muddyc2Go_Dll_Launcher_Strings (yara-rule)
Reports & references
- deepinstinct.com — Muddyc2Go Latest C2 Framework Used By Iranian Apt Muddywater Spotted In Israel (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Muddyc2Go (report)
- Broadcom/Symantec — Iran Apt Seedworm Africa Telecoms (report)
- deepinstinct.com — Darkbeatc2 The Latest Muddywater Attack Framework (report)