Yikes. And this is from yesterday, so a week later, the damage is done and ongoing.
I still ask myself why Iranian threat actors would target Ubuntu? Linux is popular in the ME because it's easier to use on Android, which is also popular for numerous reasons. So maybe there are entities there using Linux that have some strategic value? Maybe it was just the easier target? Ubuntu is an odd target, and none of these theories are the right answer.