MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack

Source: The Hacker News

MuddyWater ransomware “false flag” attack

The Iranian state‑sponsored hacking group known as MuddyWater (also referred to as Mango Sandstorm, Seedworm, and Static Kitten) has been attributed to a ransomware attack described as a “false flag” operation.

The attack, observed by Rapid7 in early 2026, leveraged social‑engineering techniques via Microsoft Teams to initiate the infection sequence.