HIGHRansomware
Global

Iran-Linked MuddyWater Poses as Ransomware Gang to Mask Cyber Espionage

·Source: Infosecurity Magazine

Updated:

Executive Summary

An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commercially available malware

Analysis

An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commercially available malware
Source Attribution

Originally published by Infosecurity Magazine on Jun 24, 2026.

Related Threats

CRITICALRansomware

FortiBleed Hacks Tied to INC Ransom and Lynx Operation

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/fortibleed-tied-to-inc-ransom-lynx-operation-image_small-3-a-32147.jpg" align=right hspace=4><b>Theat Actor Accessed INC and Lynx Ransom Negotiation Panels</b><br>SOCRadar linked the FortiBleed credential-harvesting operation to ransomware groups INC Ransom and Lynx, citing evidence that a sophisticated initial access broker compr

Bank Info Security
HIGHRansomware

Breach Roundup: DeepSeek Sparks Browser Ransomware

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/breach-roundup-deepseek-sparks-browser-ransomware-image_small-6-a-32149.jpg" align=right hspace=4><b>Also, False Negatives Causes Trust in AI Pentest to Drop</b><br>This week: a DeepSeek browser-only ransomware path, AI pen testing trust dropped, Mustang Panda targeted India, Tata breach exposed iPhone 18 data, CISA flagged BlueHa

Bank Info Security
CRITICALRansomware

FortiBleed Actors Collaborating With Inc, Lynx Ransomware Gangs

After gaining a foothold in thousands of Fortinet firewalls, the attackers are starting to monetize that access, and are also piling on a Nextcloud zero-day bug.

Dark Reading