CISA, FBI, MS-ISAC, and CCCS Warn of Truebot Infecting US and Canadian Organizations

The threat actors behind the attacks compromised target networks by exploiting a critical remote code execution (RCE) vulnerability in the Netwrix Auditor software tracked as CVE-2022-31199.