Iran Ran a Fake Ransomware Attack — The Real Operation Was Something Much Worse

Iran’s state-sponsored hacking group MuddyWater disguised an entire espionage campaign as a ransomware attack — but never encrypted a single file. The ransomware branding was a decoy designed to keep defenders chasing a threat that didn’t exist, while operatives quietly stole credentials and planted backdoors inside a U.S. bank, an airport, and a defense contractor. Their entry method? Microsoft Teams. Fake IT support agents convinced employees to share their screens — then watched them type passwords in real time, bypassing multi-factor authentication entirely. Not every ransomware attack is about money. Sometimes the ransom note is just a magic trick.
#CyberSecurity #MuddyWater #Iran #Ransomware #CyberEspionage #StateSponsored

Видео Iran Ran a Fake Ransomware Attack — The Real Operation Was Something Much Worse канала The Intel Desk