[Stanley]

MuddyWater Targets MENA Organizations with GhostFetch, CHAR, and HTTP_VIP

The Iranian hacking group known as MuddyWater (aka Earth Vetala, Mango Sandstorm, and MUDDYCOAST) has targeted several organizations and individuals mainly located across the Middle East and North Africa (MENA) region as part of a new campaign codenamed Operation Olalampo.
The activity, first observed on January 26, 2026, has resulted in the deployment of new malware families that share

https://thehackernews.com/2026/02/muddyw...tions.html

[Immortal]

It’s a mistake to underestimate the devs behind these campaigns. While some of their older methods were noisy, this latest shift shows a high level of adaptability. They are learning from every public report that gets published and tightening their operational security (OPSEC) accordingly.

If you're operating in any sectors they frequent, you should be less worried about "standard" malware and more worried about how they're manipulating legitimate administrative tools. Respect the craft, but harden your endpoints.