Since 2019, the notorious Clop group, also known as TA505, has been wreaking havoc by distributing ransomware. Over 3,000 organizations in the United States and 8,000 globally have been targeted by the group.
Furthermore, the group functions as an initial access broker, offering compromised networks to other groups. In addition, they operate a specialized botnet that is focused on carrying out financial fraud and phishing activities.
In addition to that, the group has successfully created three cutting-edge exploits and utilizes tailor-made webshells and malware toolkits in their sophisticated attacks. What sets them apart from other extortion groups is their advanced level of sophistication, which goes beyond the typical reliance on open-source tools.
According to the research KonBriefing research, Till now United States of America is the highest victimized country by MOVEit. 294 organizations of USA have been affected by MOVEit.
ALSO READ:
While Germany is the 2nd affected country with 33 organizational attack and Canada’s 22 organizations have been affected in the most sophisticated attack.