IOC Radar

espionage

IranThreat Actor

Active Threat

MuddyWater

9

IOCs Tracked

2

Intel Reports

Associated IOCs9 total

Domain1

signspace.cloud

MD52

870aef541453461c0a7208deb5fe4ca0

2026-06-02Medium

72f988bf86f141af91ab2d7cd011db47

2026-06-02Medium

SHA12

7e6d9dac619c04ae1b3c8c0906123e752ed66d63

2026-06-02Medium

dc0acb01e3086ea8a9cb144a5f97810d291020ce

2026-06-02Medium

SHA2563

11af4566539ad3224e968194c7a9ad7b596460d8f6e423fc62d1ea5fc0724326

2026-06-02Medium

f0a6b89ec7eee83274cd484cea526b970a3ef28038799b0a5774bb33c5793b55

2026-06-02Medium

f0668ce925f36ff7f3359b0ea47e3fa243af13cd6ad9661dfccc9ff79fb4f1cc

2026-06-02Medium

CVE1

CVE-2025-53521

Related Reports2 total

Exposing Fox Tempest: A malware-signing service operation

Microsoft Threat IntelligenceMay 19, 2026

NSFOCUS Monthly APT Insights – March 2026

NSFOCUS Security LabsMay 28, 2026

Threat Profile

Motivationespionage

Origin

Iran

Last seenJun 2026

IOCs tracked9