Group behind Clop ransomware exploiting MOVEit zero-day, says Microsoft
Microsoft said Lace Tempest, the group behind the ransomware variant, have used similar vulnerabilities in the past to steal data and extort victims.
Stay updated with breaking news from Progress Software Moveit. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Microsoft said Lace Tempest, the group behind the ransomware variant, have used similar vulnerabilities in the past to steal data and extort victims.
The BBC, British Airways and Boots have been caught up in a cyber incident that has exposed employee personal data, including bank and contact details, to hackers.
Attackers using an unpatched exploit for Progress Software’s MOVEit Transfer product breached a number of large companies. TechCrunch lists BBC, BA, and Nova Scotia’s government as known victims already. Microsoft Threat Intelligence linked these to an affiliate of the Clop ransomware group, which TechCrunch notes has previously attacked exploits in other file transfer tools like GoAnywhere, and typically demands payment to not post the stolen records online.
Microsoft reveals critical flaw exploit in Progress Software MOVEit Transfer app, linking it to notorious threat actor Lace Tempest.
The Clop ransomware gang has told BleepingComputer they are behind the MOVEit Transfer data-theft attacks, where a zero-day vulnerability was exploited to breach multiple companies' servers and steal data.