New MuddyWater Activities Uncovered:

Trend Micro Research details new and historical MuddyWater activity: spear-phishing and template-injection campaigns delivering multi-stage PowerShell backdoors (notably POWERSTATS v3) and other custom implants (CLOUDSTATS, SHARPSTATS, DELPHSTATS), reuse of public post-exploitation tools, links to multiple Android malware families, use of false flags, compromised WordPress proxies and ephemeral C2 infrastructure, leaked backend code and victim lists, and a large set of IoCs affecting government, telecoms and other sectors across the Middle East, Asia, Europe and the US.