Iranian government hackers using Chaos ransomware as cover, researchers say

Multiple security incidents and policy developments: Rapid7 reported an intrusion that mimicked Chaos ransomware but was attributed to MuddyWater (an Iranian APT linked to MOIS), indicating ransomware was used as operational cover. ESET attributed an Android ‘BirdCall’ malware campaign to North Korea’s APT37, which delivered a backdoor via a suite of card games from vendor Sqgame targeting ethnic Koreans in China. Polish intelligence warned of attacks on water-treatment control systems amid heightened hostile cyber activity (report mentions increased focus by Russian special services). SeparAT