The Clop ransomware gang is responsible for recent attacks on Cleo's file transfer software, exploiting zero day vulnerabilities to gain unauthorized access and steal data.
Hackers exploited a bypass of a patch released by Cleo, which was intended to fix a critical vulnerability, allowing them to upload a Java backdoor for further data theft.
The Clop gang communicates a shift in their targeting strategy, indicating an intent to extort newly compromised victims for stolen data, while previously stolen data has been deleted.
The U.S. government is taking the matter seriously, linking Clop’s activities to foreign state actors and offering a $10 million bounty for information.
Collection
[
|
...
]