CISA Joint Cybersecurity Advisory - AA22-055A: Iranian Government-Sponsored Actors Conduct Cyber Operations

This joint advisory from FBI, CISA, CNMF, NCSC‑UK, and NSA attributes widespread cyber espionage and malicious activity to the Iranian government‑sponsored APT "MuddyWater," describing their spearphishing and exploitation methods, multiple malware families (PowGoop, Small Sieve, Canopy/Starwhale, Mori, POWERSTATS), observed CVE exploitation, detailed TTPs and IOCs (IP addresses, file hashes, registry paths), and recommended mitigations and reporting procedures.