Malware
Stagecomp
- First Reported
- May 6, 2026
- Latest Reported
- May 14, 2026
Reported Context (2)
- Historically, this identity was also used to sign Stagecomp (ms_upd.exe), a downloader for the Darkcomp backdoor (Game.exe), both of which are firmly attributed to MuddyWater by multiple global security vendors. Rapid7 Assesses Chaos-Branded Intrusion as Likely MuddyWater False Flag
- Rapid7’s attribution cites infrastructure overlap, a code-signing certificate linked to Stagecomp/Darkcomp, and operational tradecraft pointing to MuddyWater. MuddyWater Used Chaos Ransomware as Espionage Decoy, Rapid7 Says
Malware (5)
Threat Actors (6)
MITRE ATT&CK (19)
Vendors (3)
Products (5)
Industries (3)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.