LIVE
UTC --:--:--
OT SECURITY HUB
by zuckergates
// INCIDENT · 2023

MOVEit Transfer (Cl0p)

Eksploitasi massal aplikasi managed file transfer MOVEit oleh geng Cl0p — kampanye pencurian data terbesar 2023.

criticalGlobalMultiCl0p (TA505)
Impact
2.700+ organisasi, 95+ juta individu terdampak; BBC, BA, Shell, Maximus, DOE.
Initial vector
SQLi zero-day CVE-2023-34362
Malware / tooling
Cl0p
Lessons learned
  • MFT app exposure review
  • File transfer tokenization
  • Vendor zero-day playbook