MOVEit Transfer App Exploited by Hackers for Data Theft and Ransomware Attacks, Microsoft and CISA Warn
TL;DR
Microsoft has linked the ongoing exploitation of a critical flaw in the Progress Software MOVEit Transfer application to the Lace Tempest threat actor. The group is known for exploiting different zero-day flaws to siphon data and extort victims. The flaw, CVE-2023-34362, allows attackers to authenticate as any user and gain access to the database and execute arbitrary code. At least 3,000 exposed hosts are believed to be utilizing the MOVEit Transfer service. Users are recommended to apply vendor-provided patches as soon as possible to secure against potential risks.
Topics:businesscybersecurity#cybersecurity#data-exfiltration#lace-tempest#microsoft#moveit-transfer#sql-injection
- Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App The Hacker News
- Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations SecurityWeek
- Microsoft links Clop ransomware gang to MOVEit data-theft attacks BleepingComputer
- CISA warns of critical vulnerability in MOVEit file transfer software SiliconANGLE News
- Report: Hackers Exploit File-Transfer Software MOVEit Security Flaw to Steal User Data PYMNTS.com
Want the full story? Read the original reporting
Read on The Hacker News