Group-IB links a macro-based phishing campaign to Iranian threat actor MuddyWater Attackers used fake emails and Word docs to ...