corpus.blog
41,554 blogs · 5,063,431 posts Claim your blog
Record · corpus.blog/posts/01a0d4a4-941a-7270-8f8a-12717d54a463

Boggy Serpens Threat Assessment

Unit 42 · published 16 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture
1blogs citing
First cited
21 Mar 2026
Most recent
21 Mar 2026
Rank this month
not ranked
External links
39
Words captured
5,091

Cited by

Blog
In the post
Date
blog.synapticsystems.de
Observed Telegram Bot Naming Patterns in Recent MuddyWater Malware Activity Read at the source ↗
21 Mar 2026
blog.synapticsystems.de
Observed Telegram Bot Naming Patterns in Recent MuddyWater Malware Activity Read at the source ↗
21 Mar 2026

Links from this post

Link
Host
https://docs-cortex.paloaltonetworks.com/p/XDR
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/p/XSIAM
docs-cortex.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-4.x-Documentation/Cortex-Advanced-Email-Security-module-overview
docs-cortex.paloaltonetworks.com
https://docs.paloaltonetworks.com/wildfire
docs.paloaltonetworks.com
https://www.paloaltonetworks.com/network-security/advanced-url-filtering
paloaltonetworks.com
https://docs.paloaltonetworks.com/dns-security
docs.paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-AgentiX/Cortex-AgentiX-Documentation/Get-Started-with-Cortex-AgentiX
docs-cortex.paloaltonetworks.com
https://www.cisa.gov/news-events/alerts/2022/02/24/iranian-government-sponsored-muddywater-actors-conducting-malicious-cyber-operations
cisa.gov
https://www.deepinstinct.com/blog/muddywater-en-able-spear-phishing-with-new-ttps
deepinstinct.com
https://www.cisa.gov/resources-tools/resources/identifying-and-mitigating-living-land-techniques
cisa.gov
https://attack.mitre.org/techniques/T1219/
attack.mitre.org
https://www.atera.com/
atera.com
https://www.screenconnect.com/
screenconnect.com
https://simple-help.com/
simple-help.com
https://attack.mitre.org/software/S0349/
attack.mitre.org
https://attack.mitre.org/software/S0488/
attack.mitre.org
MuddyWater: Snakes by the riverbank
welivesecurity.com
https://attack.mitre.org/groups/G1001/
attack.mitre.org
https://malpedia.caad.fkie.fraunhofer.de/actor/oilrig
malpedia.caad.fkie.fraunhofer.de
https://www.gov.il/en/pages/_muddywater
gov.il
https://malpedia.caad.fkie.fraunhofer.de/details/win.darkbit
malpedia.caad.fkie.fraunhofer.de
https://www.group-ib.com/blog/muddywater-operation-olalampo/
group-ib.com
https://dreamgroup.com/blog-cti/
dreamgroup.com
https://www.gov.il/BlobFolder/reports/alert_1947/he/ALERT-CERT-IL-W-1947.pdf
gov.il
https://learn.microsoft.com/en-us/defender-office-365/anti-spam-spam-confidence-level-scl-about
learn.microsoft.com
https://www.fortinet.com/blog/threat-research/udpgangster-campaigns-target-multiple-countries
fortinet.com
https://www.virustotal.com/gui/file/81a6e6416eb7ab6ce6367c6102c031e2ae2730c3c50ab9ce0b8668fec3487848/
virustotal.com
https://www.paloaltonetworks.com/cortex/cortex-xdr?_gl=1*13pmp8e*_ga*NzQyNjM2NzkuMTY2NjY3OTczNw..*_ga_KS2MELEEFC*MTY2OTczNjA2MS4zMS4wLjE2Njk3MzYwNjEuNjAuMC4w
paloaltonetworks.com
https://www.paloaltonetworks.com/resources/datasheets/cortex-xsiam-aag
paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-4.x-Documentation/Malware-protection
docs-cortex.paloaltonetworks.com
https://docs.paloaltonetworks.com/ngfw
docs.paloaltonetworks.com
https://www.fdd.org/analysis/2025/06/26/iran-based-psychological-operation-sets-saudi-aramco-in-its-crosshairs/
fdd.org
https://www.group-ib.com/blog/muddywater-infrastructure-malware/
group-ib.com
https://www.group-ib.com/blog/muddywater-espionage/
group-ib.com
https://www.virustotal.com/gui/file/9c207c51c448f96eaae91241a39c8bb85e2307f2d2a99244763a53176cf4c02f
virustotal.com
https://www.virustotal.com/gui/file/c91413ad7c94c0e2694862b9d671d1204873bf65576ba2cb91fbd562a4ccf79b
virustotal.com
https://attack.mitre.org/techniques/T1055/012/
attack.mitre.org
https://www.virustotal.com/gui/file/a2001892410e9f34ff0d02c8bc9e7c53b0bd10da58461e1e9eab26bdbf410c79
virustotal.com
https://www.virustotal.com/gui/file/1bcd8d7dc7bed5873bbdd2822e84e19773a33d659b16587ca9dc6db204447a86
virustotal.com
Elsewhere on unit42.paloaltonetworks.com (3)