Iran's MuddyWater phishes Israeli orgs with custom BugSleep backdoor

Check Point Research reports that MuddyWater, an Iranian government-backed APT, has begun deploying a bespoke backdoor named "BugSleep" via phishing emails (often from compromised organizational accounts) targeting Israeli organizations and other regional targets; analyzed samples show scheduled-task persistence, data exfiltration routines, evasion techniques, and a custom shellcode loader, indicating an active, capable espionage campaign.