+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: MuddyWater Targets MENA Organizations with GhostFetch, CHAR, and HTTP_VIP (/showthread.php?tid=6321110)
MuddyWater Targets MENA Organizations with GhostFetch, CHAR, and HTTP_VIP - Stanley - Mar 3, 2026
MuddyWater Targets MENA Organizations with GhostFetch, CHAR, and HTTP_VIP
The Iranian hacking group known as MuddyWater (aka Earth Vetala, Mango Sandstorm, and MUDDYCOAST) has targeted several organizations and individuals mainly located across the Middle East and North Africa (MENA) region as part of a new campaign codenamed Operation Olalampo.
The activity, first observed on January 26, 2026, has resulted in the deployment of new malware families that share
https://thehackernews.com/2026/02/muddywater-targets-mena-organizations.html
RE: MuddyWater Targets MENA Organizations with GhostFetch, CHAR, and HTTP_VIP - Immortal - Mar 3, 2026
It’s a mistake to underestimate the devs behind these campaigns. While some of their older methods were noisy, this latest shift shows a high level of adaptability. They are learning from every public report that gets published and tightening their operational security (OPSEC) accordingly.
If you're operating in any sectors they frequent, you should be less worried about "standard" malware and more worried about how they're manipulating legitimate administrative tools. Respect the craft, but harden your endpoints.