The internationally coordinated notice offers specific best practices for MSPs and customers amid warnings of increasing threats.

The Cybersecurity and Infrastructure Security Agency is attributing the campaign to hackers known as the Lazarus Group.

The ransomware gang vowed to attack Russia's enemies.

The "large-scale modular malware framework" has largely replaced the "VPNFilter" tools that Sandworm used before they were disrupted in 2018.

Private-sector experts say that public-private threat sharing is key.

The advisory singled out critical infrastructure as being especially at risk.