Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.
MuddyWater’s Operation Olalampo targets MENA with GhostFetch, CHAR, HTTP_VIP, and AI-assisted malware since Jan 26, 2026.