malware

Mori

S1047 · ATT&CK v19.2

Platforms

Windows

Tracked actors

Description

[Mori](https://attack.mitre.org/software/S1047) is a backdoor that has been used by [MuddyWater](https://attack.mitre.org/groups/G0069) since at least January 2022.(Citation: DHS CISA AA22-055A MuddyWater February 2022)(Citation: CYBERCOM Iranian Intel Cyber January 2022)

Actors that use this

1 tracked actor

MuddyWaterATT&CK-attributed