MuddyWater Q1 2026 DLL side-loading campaign
campaign · campaign:muddywater-seedworm-fortemedia-sentinelone-dll-sideload-chromelevator-nodejs
Symantec-documented MuddyWater/Seedworm Q1 2026 campaign: DLL side-loading via signed Fortemedia / SentinelOne binaries, ChromElevator App-Bound-Encryption bypass, Node.js orchestration.
Coverage timeline
0
first 2026-05-28 → last –
no data
Peak priority
—
no matching entries
Sources cited
0
0 hosts
Sections touched
0
—
Co-occurring entities
0
no co-occurrence
ATT&CK techniques
0
no mapped behavior yet
Story timeline
No published entries reference this entity yet.
Relationships explore in graph
Typed, source-stated connections from the entity registry — each edge cites the entry whose reporting establishes it.
attributed to
Entries about MuddyWater Q1 2026 DLL side-loading campaign
No published entry references this entity yet · entries match by registry key, by the entity's name or a public alias appearing in the entry title or body, or (for CVE entities) by exact CVE id.