MOVEit Exploit Used by Ransomware Gang for Data Theft, Microsoft and CISA Warn
TL;DR
Microsoft has linked the Clop ransomware gang to recent data theft attacks that exploited a zero-day vulnerability in the MOVEit Transfer platform. The attacks began on May 27th, with the threat actors dropping webshells on servers to steal data and credentials. Microsoft is attributing the attacks to Lace Tempest, also known as TA505, FIN11, or DEV-0950. The Clop ransomware operation is known for targeting managed file transfer software and is expected to begin extorting victims soon.
Topics:businesscybersecurity#clop-ransomware#cybersecurity#data-theft#lace-tempest#microsoft#zero-day-vulnerability
- Microsoft links Clop ransomware gang to MOVEit data-theft attacks BleepingComputer
- Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations SecurityWeek
- Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App The Hacker News
- CISA warns of critical vulnerability in MOVEit file transfer software SiliconANGLE News
- CISA orders govt agencies to patch MOVEit bug used for data theft BleepingComputer
Want the full story? Read the original reporting
Read on BleepingComputer