MuddyWater APT Embedded in US Bank and Airport Networks Using New Dindoor Backdoor

Researchers discovered Iranian APT MuddyWater (Seedworm), affiliated with MOIS, embedded in networks of multiple US organizations including banks, airports, and a nonprofit, using a new backdoor called Dindoor. The group also compromised the Israeli arm of a software company. Separately, Handala hacktivist group claimed to have breached Sharjah National Oil Corporation and Israel Opportunity Energy, exfiltrating over 1.3TB of sensitive data including oil contracts and financial records. The operations demonstrate Iran's shift from disruptive attacks to persistent intelligence-gathering positions inside Western critical infrastructure.