Lucene search

K
hiveproHiveForce LabHIVEPRO:109216D9110425668B5DBDEE068EB2C1
HistoryFeb 13, 2023 - 11:34 a.m.

Clop Ransomware Group Claims Responsibility for GoAnywhere MFT Attacks

2023-02-1311:34:45
HiveForce Lab
www.hivepro.com
19

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Clop ransomware group claims responsibility for recent cyber attacks that exploited a zero-day vulnerability in the GoAnywhere MFT secure file transfer tool. The vulnerability, now known as CVE-2023-0669, allows attackers to gain remote code execution on unpatched GoAnywhere MFT instances with their administrative console exposed to the Internet. The group claims to have stolen data from over 130 organizations but refused to provide proof or details about the attacks and extortion.

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H