Mori (385e1eaf-9ba8-4381-981a-3c7af718a77d)
Mori is a backdoor that has been used by MuddyWater since at least January 2022.[DHS CISA AA22-055A MuddyWater February 2022][CYBERCOM Iranian Intel Cyber January 2022]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Mori (385e1eaf-9ba8-4381-981a-3c7af718a77d) | Tidal Software | MuddyWater (dcb260d8-9d53-404f-9ff5-dbee2c6effe6) | Tidal Groups | 1 |