CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability

cisa.gov

20 points·_svoh··10 comments

Open articleView on HN

https://techcrunch.com/2023/06/15/moveit-clop-mass-hacks-ban...

But the good news is Progress software is hiring a security engagement coordinator:

https://www.progress.com/company/careers/security-engagement...

I'm sure that will solve all their security problems.

"Клоп" is a Russian word for bedbugs and heteropteras in general.

I think this is likely to be on par with or even eclipse SolarWinds. Can anyone more experienced chime in?

How popular is moveit transfer? I've never heard of it before, seems to be some sort of ftp server.

Anyways, unless the install base is really huge, i doubt an sql injection in some app is going to be equivalent to solar winds. This sounds more like just a typical vuln that happened to be exploited in the wild.

It has so far compromised multiple DMVs, some US federal energy entities, British Airways, some Canadian provincial governments, and more

I'm going to file this under "I'm affected, but so are millions (billions?) of others to the point I can't care anymore."

I have been getting urgent notification emails from certain vendors & partners. It makes me sick to think about the data that got scooped on this one.

From my perspective, I'd say that every single US financial institution was impacted in some way by this.

Any idea if this is related to the cnn article about the cyber attacks on the gov ?

Yes it is the same

Reply on news.ycombinator.com