3 ms·

CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability

• _8j50 3y ago
  https://techcrunch.com/2023/06/15/moveit-clop-mass-hacks-banks-universities/ https://techcrunch.com/2023/06/15/moveit-clop-mass-hacks-ban...
• thriftwy 3y ago
  "Клоп" is a Russian word for bedbugs and heteropteras in general.
• IAmPaigeAT 3y ago
  Any idea if this is related to the cnn article about the cyber attacks on the gov ?
  • buildbot 3y ago
    Yes it is the same
• jurynulifcation 3y ago
  I think this is likely to be on par with or even eclipse SolarWinds. Can anyone more experienced chime in?
  • bawolff 3y ago
    How popular is moveit transfer? I've never heard of it before, seems to be some sort of ftp server. Anyways, unless the install base is really huge, i doubt an sql injection in some app is going to be equivalent to solar winds. This sounds more like just a typical vuln that happened to be exploited in the wild.
    • _svoh 3y ago
      It has so far compromised multiple DMVs, some US federal energy entities, British Airways, some Canadian provincial governments, and more
      • Dalewyn 3y ago
        I'm going to file this under "I'm affected, but so are millions (billions?) of others to the point I can't care anymore."
  • bob1029 3y ago
    I have been getting urgent notification emails from certain vendors & partners. It makes me sick to think about the data that got scooped on this one. From my perspective, I'd say that every single US financial institution was impacted in some way by this.
• retrocryptid 3y ago
  But the good news is Progress software is hiring a security engagement coordinator: https://www.progress.com/company/careers/security-engagement-coordinator-oVWqnfwo https://www.progress.com/company/careers/security-engagement... I'm sure that will solve all their security problems.