New C2 framework leveraged by MuddyWater

Attacks by Iranian state-backed threat group MuddyWater, also known as Mango Sandstorm and Mercury, against Israeli research institute Technion, as well as PaperCut servers have involved the utilization of the PhonyC2 post-exploitation command-and-control framework.

attacks c2 framework command control exploitation framework iranian israeli mango mango sandstorm mercury muddywater papercut post-exploitation research sandstorm servers state technion threat threat group threats