[New post] Zero-Day Vulnerability In MOVEit Transfer Exploited For Data Theft

Malware Devil posted: "UPDATE (June 9): On June 6, 2023, Mandiant merged UNC4857 into FIN11 based on targeting, infrastructure, certificate and data leak site (DLS) overlaps. This blog post has been updated to reflect the new attribution and supporting evidence. Mandiant h" Malware Devil Zero-Day Vulnerability In MOVEit Transfer Exploited For Data Theft Malware Devil Jun 2 UPDATE (June 9): On June 6, 2023, Mandiant merged UNC4857 into FIN11 based on targeting, infrastructure, certificate and data leak site (DLS) overlaps. This blog post has been updated to reflect the new attribution and supporting evidence. Mandiant has observed wide exploitation of a zero-day vulnerability in the MOVEit Transfer secure managed file transfer software for subsequent data theft. This vulnerability was announced by Progress Software Corporation on May 31, 2023 and has been assigned CVE-2023-34362. Based on initial analysis from Mandiant incident response engagements, the Unsubscribe to no longer receive posts from Malware Devil. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://malwaredevil.com/zero-day-vulnerability-in-moveit-transfer-exploited-for-data-theft/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110