The MuddyWater cyberespionage organization recently resurfaced after launching a new social engineering campaign targeting users throughout the region. MuddyWater, alternatively tracked as Static Kitten, is an Iranian-linked threat group believed to be operating on behalf of the Iran Ministry of Intelligence and Security (MOIS). Since their first observation in 2017, MuddyWater actors have often targeted critical infrastructure including telecommunications, natural gas, defense, and government organizations throughout North America, Europe, Middle East, and more. In their current campaign, MuddyWater threat actors are distributing phishing emails using a variety of social engineering lures to persuade the user to open attached documents or visit embedded links. Several observed links show traces to DropBox/OneDrive repositories and encoded HTML webpages hosting malicious content. While delivery methods of the malware vary, the deployed malware is fairly consistent throughout this campaign. The malware MuddyWater has embedded installs a new remote administration tool called Syncro. Once installed on the system, MuddyWater threat actors have remote access to the infected device and have the capabilities to conduct initial reconnaissance protocols, which could lead to further exploitation by the threat actors. CTIX continues to urge users to ensure the integrity of all email communications prior to visiting any embedded links or downloading any attachments to lessen the risk of threat actor compromise.