Case gtig-muddywater-gemini-opsecState actor AI opsWorldwide
Iran's MuddyWater leaked C2 domain and encryption key to Gemini while debugging malware
TEMP.Zagros (MuddyWater) used student-project pretexts to get Gemini's help building web shells and a Python C2 server, and pasted a script containing its C2 domain and encryption key, exposing infrastructure to Google.
MediumAttack using AIStatus: ContainedVerified case file
Open in the interactive mapCite this case
- Reported
- Nov 5, 2025
- Location
- Worldwide
- Target
- MuddyWater phishing victims via compromised corporate email
- Severity
- Medium
- Triggered by
- TEMP.Zagros / MuddyWater (Iran)
- Actor type
- State-sponsored
- Reported loss
- None reported
- CVE
- None
What happened
TEMP.Zagros (MuddyWater) used student-project pretexts to get Gemini's help building web shells and a Python C2 server, and pasted a script containing its C2 domain and encryption key, exposing infrastructure to Google.
Impact: Infrastructure exposed to defenders; campaign disrupted.
Who triggered it
Actor: TEMP.Zagros / MuddyWater (Iran)
Attribution: GTIG attributes the accounts to the Iranian government-backed group with high confidence.
Motive: Espionage
How it happened
Attack vector: Pretext prompts to obtain custom malware code and debugging
Root cause: Operator pasted live infrastructure details into a monitored service
Timeline
- Group shifts from public tools to custom web shells and Python C2
- GTIG disables assets and publishes the case
Response
Google disabled assets, took broader action against the campaign and strengthened classifiers.
Current status: Contained
Sources (open in a new tab)
- GTIG AI Threat Tracker November 2025 cloud.google.com
- Hendry Adrian mirror hendryadrian.com
Cite this case
Iran's MuddyWater leaked C2 domain and encryption key to Gemini while debugging malware. AI Threat Watch, case gtig-muddywater-gemini-opsec, Nov 5, 2025. https://aithreat.io/cases/gtig-muddywater-gemini-opsec/
Permanent link: https://aithreat.io/cases/gtig-muddywater-gemini-opsec/