Iran's MuddyWater phishes Israeli orgs with custom BugSleep backdoor

MuddyWater, an Iranian government-backed cyber espionage crew, has upgraded its malware with a custom backdoor, which it's used to target Israeli organizations. The gang has been linked to Iran's Ministry of Intelligence and Security (MOIS), which the US sanctioned in 2022 in response to its attacks against Albania and other " …

[J. R. Hartley]

Bravo

Excellent work. Anyone that helps stop the genocide being committed by apartheid israel should be commended.

I lost my silver badge for criticising apartheid israel many years ago, so will be interesting to see if this post gets deleted.

[diodesign]

Badges

Bronze and silver badges are awarded automatically once you cross certain posting milestones, and are automatically removed if you drop below those thresholds (and awarded again when go above). Gold is another thing.

So it was (FYI) probably an automatic thing if you lost a silver, unless someone intervened before my time here.

C.

[Anonymous Coward]

Re: Badges

I can totally see how you could easily lose a badge without mod intervention if you post an opinion on one of the more contentious issues like Israel/Palestine, Brexit, Musk or Crypto, some of those subject commenters are crazy.

Bring back the Moderatrix!

[J. R. Hartley]

Re: Badges

I had a post removed, and my silver badge removed at the exact same time. Never ever criticise apartheid israel, fellow commentards.

[Bendacious]

Re: Bravo

The enemy of your enemy is not always your friend. Hard to see Iran targeting Portuguese businesses with malware as a ‘Bravo’ moment.

[Phil O'Sophical]

Re: Bravo

the genocide being committed by apartheid israel should be commended.

And what abut the genocide called for by Iran, who openly call for the total destruction of the state of Israel?

[Zolko]

Re: Bravo

@Phil: as you said, one is an actual genocide happening now with tens or hundreds of thousands deaths and no end in sight, the other are threats and words with 0 – zero – deaths. Do you see the difference ?

[Phil O'Sophical]

Cyber attacks on Israel could be interesting. I doubt if Mossad will bother with pwning command/control servers or such niceties as international arrest warrants.

[Claptrap314]

Your Jew-hatred is showing.

How exactly would such an arrest warrant be implemented? How exactly would one event attribute the attack to a particular individual in order to get them named in the warrant?

Iran declared war on the US & Israel in 1979. While neither has seen fit to treat the situation seriously, law enforcement has not historically been part of how one prosecutes a war.

[J. R. Hartley]

"Your Jew-hatred is showing.

How exactly would such an arrest warrant be implemented? How exactly would one event attribute the attack to a particular individual in order to get them named in the warrant?

Iran declared war on the US & Israel in 1979. While neither has seen fit to treat the situation seriously, law enforcement has not historically been part of how one prosecutes a war."

A perfect example of how Vulture Central has gone down the pan since it went all yeehaww yankee doodle in the head.

[FirstTangoInParis]

Stopping users installing programs

So as an admin for a tiny charity running 365, I’ve tried stopping users installing programs and restricting such things to the admin (me!). And then I find i can’t even install stuff. I don’t have the time or money to go rolling out SCCM or similar, so stopping malware is a real problem. I kind of feel MS have dug their own hole here. Make the admin tools simpler and do what they say on the tin, then we’d less EDM tooling.