Since 2019, the notorious Clop group, also known as TA505, has been wreaking havoc by distributing ransomware.
Over 3,000 organizations in the United States and 8,000 globally have been targeted by the group.
Furthermore, the group functions as an initial access broker, offering compromised networks to other groups. In addition, they operate a specialized botnet that is focused on carrying out financial fraud and phishing activities.
In addition to that, the group has successfully created three cutting-edge exploits and utilizes tailor-made webshells and malware toolkits in their sophisticated attacks. What sets them apart from other extortion groups is their advanced level of sophistication, which goes beyond the typical reliance on open-source tools.
According to the research KonBriefing research, Till now United States of America is the highest victimized country by MOVEit. 294 organizations of USA have been affected by MOVEit.
ALSO READ:
By infosecbulletin
/ Friday , May 9 2025
Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...
Read More
By infosecbulletin
/ Thursday , May 8 2025
The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...
Read More
By infosecbulletin
/ Thursday , May 8 2025
SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...
Read More
By infosecbulletin
/ Thursday , May 8 2025
From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...
Read More
By infosecbulletin
/ Thursday , May 8 2025
Cisco has issued a security advisory for a critical vulnerability in its IOS XE Software for Wireless LAN Controllers (WLCs)....
Read More
By infosecbulletin
/ Wednesday , May 7 2025
Attackers linked to the Play ransomware operation deployed a zero-day privilege escalation exploit during an attempted attack against an organization...
Read More
By infosecbulletin
/ Wednesday , May 7 2025
Hackers are exploiting an unauthenticated remote code execution vulnerability in the Samsung MagicINFO 9 Server to take control of devices...
Read More
By infosecbulletin
/ Tuesday , May 6 2025
CISA added the Langflow vulnerability, CVE-2025-3248 (CVSS score 9.8), to its Known Exploited Vulnerabilities catalog. Langflow is a popular tool...
Read More
By infosecbulletin
/ Tuesday , May 6 2025
Google has released its monthly Android security updates, addressing 46 vulnerabilities, including one that has been actively exploited. CVE-2025-27363 (CVSS...
Read More
By infosecbulletin
/ Tuesday , May 6 2025
The Cyber Security Club, representing the Department of Computer Science and Engineering at the University of Asia Pacific (UAP), has...
Read More
Data breaches cost $4.45 million in 2023 average
While Germany is the 2nd affected country with 33 organizational attack and Canada’s 22 organizations have been affected in the most sophisticated attack.
