MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries

MuddyWater launched multi-country espionage campaign using DLL side-loading techniques.

• •Nine organizations across nine countries targeted in Q1 2026, including electronics and finance sectors
• •Malicious DLLs sideloaded via legitimately signed Fortemedia and SentinelOne binaries
• •ChromElevator tool stole passwords, cookies, and payment card data from Chromium browsers
• •Node.js and PowerShell scripts performed reconnaissance, credential theft, and lateral network movement

This summary was automatically generated by AI based on the original article and may not be fully accurate.