MOVEit Transfer App Breached by Clop Ransomware and Hackers

The Clop ransomware gang has claimed responsibility for the recent data-theft attacks on multiple companies' servers through the exploitation of a zero-day vulnerability in Progress Software's MOVEit Transfer product. The group confirmed that they have not yet begun to extort victims but will display victims on their data leak site if a ransom is not paid. Clop has previously targeted organizations during holidays when staff is at a minimum. Zellis, a UK payroll and HR solutions provider, confirmed that it suffered a data breach due to these attacks, which also impacted some of its customers.