The Clop ransomware gang has begun extorting victims of its Cleo data theft attacks. The attackers have issued a 48-hour ultimatum for victims to enter into ransom negotiations, threatening to publicly disclose stolen data if their demands are not met.
Clop has a history of exploiting vulnerabilities in file transfer platforms, including Accellion FTA, GoAnywhere MFT and MOVEit Transfer, to conduct data theft and extortion campaigns.
Expert analysis:
Clop’s continued exploitation of zero-day vulnerabilities in widely used file transfer solutions highlights a persistent and evolving threat to organizations’ data security.
The 48-hour ultimatum tactic increases the pressure on victims, which can lead them to make hasty decisions under duress.
Organizations must prioritize the prompt application of security patches, conduct regular vulnerability assessments and implement robust incident response strategies to mitigate the risks posed by such sophisticated adversaries.
Read the full article here.
