MOVEit Mass-Hacks Reveal Initial Targets: US Banks and Universities Among Ransomware Gang's Victims
Tada, Socar's Ride-Hailing Platform, Contributes to Increasing Wave of Tech Layoffs
chandni
Ransomware Gang Discloses Initial Targets of MOVEit Mass-Hacks: US Banks and Universities Among Affected Organizations
The cybercriminal group known as lop has initiated the release of information regarding their mass-hacks, which exploited a critical security vulnerability in the widely-used corporate file transfer tool, MOVEit Transfer. These attacks have impacted numerous entities, including several American banks and universities.
Since late May, this Russia-linked ransomware gang has taken advantage of a security loophole within MOVEit Transfer, a tool commonly employed by corporations and enterprises for internet-based file sharing. While the developers of the software, Progress Software, have since patched the vulnerability, a number of their customers fell victim to the hackers before the fix was implemented.
The exact count of affected organizations remains uncertain; however, Clop, the group responsible, recently publicized the first set of targeted entities that they successfully breached by exploiting the MOVEit flaw. The list, posted on the dark web leak site associated with Clop, encompasses financial service organizations 1st Source and First National Bankers Bank, both based in the United States; Putnam Investments, an investment management firm headquartered in Boston; Landal Greenparks, located in the Netherlands; and Shell, the British energy giant.
Although GreenShield Canada, a non-profit benefits carrier specializing in health and dental benefits, was initially included in the leaked information, it has since been removed from the site.
Additional victims outlined in the disclosure consist of Datasite, a financial software provider; the educational non-profit National Student Clearinghouse; United Healthcare Student Resources, a student health insurance provider; Leggett & Platt, an American manufacturing company; ÖKK, a Swiss insurance company; and the University System of Georgia (USG).
