Table of Contents MuddyWater is changing its tactics to evade modern security defenses by abandoning familiar tools for new programming languages. Since the start of 2026, we have seen three campaigns, three runtimes, and one strategic shift from MuddyWater. The Iranian Advanced Persistent Threat (APT) group launched three separate attacks using three distinct programming environments. This points...