Boggy Serpens Hits Diplomats, Critical Infrastructure in Espionage Waves

Boggy Serpens (aka MuddyWater) has shifted to stealthy, persistence-focused campaigns targeting diplomats and critical infrastructure across the Middle East, Europe, Central/Western Asia and South America, using hijacked trusted accounts and tailored social engineering to deliver macro-laden Office documents that deploy a growing Rust- and Python-based toolset (BlackBeard, Nuso, UDPGangster, LampoRAT) and HTTP/UDP C2 techniques; the report includes timelineed campaign waves, IoCs (SHA256 hashes, an IP), and mitigation guidance (macro restrictions, identity/mailflow hardening, behavioral analytics).