MOVEit Transfer App Exploited by Clop Ransomware Group and Lace Tempest Hackers, Dozens of Organizations Affected.
TL;DR
The Clop ransomware gang is behind a new wave of mass-hacks targeting the MOVEit Transfer file transfer tool, with British Airways, the BBC, and Nova Scotia's government among the confirmed victims. Microsoft security researchers have attributed the attacks to a group it tracks as "Lace Tempest," a known affiliate of the Russia-linked Clop ransomware group. The exploitation of the MOVEit vulnerability is often followed by data exfiltration, and it's likely that many more victims of the breach will come to light over the next few days.
- Microsoft says Clop ransomware gang is behind MOVEit mass-hacks, as first victims come forward TechCrunch
- Critical Zero-Day Flaw Exploited in MOVEit Transfer Infosecurity Magazine
- Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App The Hacker News
- Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations SecurityWeek
- CISA warns of critical vulnerability in MOVEit file transfer software SiliconANGLE News
Want the full story? Read the original reporting
Read on TechCrunch