Ransomware updates: TrueBot, Cl0p, and Royal. Iranian cyberattacks. An update on the cyberattack against the Met. Notes on the hybrid war, with a focus on allies and outside actors.

Published: Dec. 12, 2022, 9:15 p.m.

TrueBot found in Cl0p ransomware attacks. Royal ransomware targets the healthcare sector. Recent Iranian cyber activity. A night at the opera: an update on the cyberattack against the Metropolitan Opera. New Cloud Atlas activity reported. Europe looks to the cybersecurity of its power grid. Rob Boyce from Accenture describes Dark web actors diversifying their toolsets. Rick Howard explains fractional CISOs. And international support for Ukrainian cyber defense continues, more extensively and increasingly overt.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/11/236\n\nSelected reading.\nBreaking the silence - Recent Truebot activity (Cisco Talos Blog)\nNew TrueBot Malware Variant Leveraging Netwrix Auditor Bug and Raspberry Robin Worm (The Hacker News)\xa0\nTrueBot infections were observed in Clop ransomware attacks (Security Affairs)\xa0\nClop ransomware uses TrueBot malware for access to networks (BleepingComputer)\xa0\nRoyal Ransomware (US Department of Health and Human Services)\nUS Dept of Health warns of \u2018increased\u2019 Royal ransomware attacks on hospitals (The Record by Recorded Future)\xa0\nIran-Backed MuddyWater's Latest Campaign Abuses Syncro Admin Tool (Dark Reading)\nMuddyWater Hackers Target Asian and Middle East Countries with Updated Tactics (The Hacker News)\nNew MuddyWater Campaign Uses Legitimate Remote Administration Tools to Deploy Malware (Cyber Security News)\nShows will go on at Met Opera despite cyber-attack that crashed network (ABC7 New York)\nCyberattack disrupts Metropolitan Opera (SC Media)\nCloud Atlas targets entities in Russia and Belarus amid the ongoing war in Ukraine (Check Point Research)\nAPT Cloud Atlas: Unbroken Threat (Positive Technologies)\nEuropean Electricity Sector Lacks Cyber Experts as Ukraine War Raises Hacking Risks (Wall Street Journal)\nHow the US has helped counter destructive Russian cyberattacks amid Ukraine war (The Hill)\xa0\nThe Australian company training Ukrainian veterans in cybersecurity (Australian Financial Review)\nHow Proton intends to thwart Russian cybercensorship with its VPN (HiTech Wiki)\xa0\nCyber Lessons Learned from the War in Ukraine (YouTube)\xa0\nWar in Ukraine Dominated Cybersecurity in 2022 (CNET)\nLearn more about your ad choices. Visit megaphone.fm/adchoices