MuddyWater joins threat groups BatLoader and Luna Moth, which have also been using Syncro to take over devices.