MuddyWater Hackers Using UDPGangster Backdoor to Attack Windows Systems Evading Network Defenses

**Executive summary:** The MuddyWater APT is running active campaigns across Turkey, Israel, and Azerbaijan using weaponized Word documents with VBA macros to deploy a UDP-based backdoor named UDPGangster; the malware includes robust anti-analysis checks, establishes persistence via %AppData% and registry startup entries, and communicates stealthily with a known C2 (157.20.182.75) over UDP port 1269.