Clop Ransomware Gang Lists First Round of Victims in Recent Attacks

Russian-linked ransomware gang Clop has been exploiting a security flaw in a file transfer tool since the end of May, and has begun listing victims who have fallen prey to the attacks. Many of the victims include U.S. banks and universities.

The MOVEit Transfer tool is the platform in question, which is used by several corporations and enterprises to share large files over the internet. The vulnerability in the tool was patched by MOVEit’s developer Progress Software, but not before a number of compromised customers became a victim.

As of this writing, it is unknown precisely how many victims there are, however an initial batch of organizations was posted on the ransomware gang’s dark web leak site. Victims include 1st Source, First National Bankers Bank, Putnam Investments, Landal Greenparks and Shell.

Another victim of the hacks included the University System of Georgia, who said they are “evaluating the scope and severity of this potential data exposure. If necessary, consistent with federal and state law, notifications will be issued to any individuals affected.”

Clop’s usual procedure is to contact the organizations affected by an attack to demand ransom payment. In this series of attacks, they changed it up and instead posted on blackmail message on their dark web site that said that affected victims needed to contact the gang prior to the June 14 deadline.

As of right now, it does not appear as though any stolen information has been published. However, Clop has declared to the victims of the attacks that they have downloaded “alot of your data.”

Source Tech Crunch