Rising Cyber Threats: Uncovering the Third MOVEit Transfer Vulnerability and Cl0p Gang’s Extortion Methods

The recent disclosure of a new vulnerability impacting Progress Software’s MOVEit Transfer application has highlighted the critical need for robust security measures and timely patching. The revelation comes at a time when the Clop ransomware gang has been exploiting multiple vulnerabilities in the software to target a wide range of organizations, including US federal agencies.

In this article, we will examine the details of the newly disclosed vulnerability and its potential impact, as well as the previous vulnerabilities exploited by the Clop ransomware gang. Additionally, we will look at statistics on the industry and location of exposed hosts running MOVEit and analyze the prevalence of different types of malware, including ransomware.

Progress Software’s Third Vulnerability Disclosure

Progress Software recently disclosed a third vulnerability impacting its MOVEit Transfer application. This time, the vulnerability is an SQL injection vulnerability that “could lead to escalated privileges and potential unauthorized access to the environment.”

The company has urged customers to disable all HTTP and HTTPS traffic to MOVEit Transfer on ports 80 and 443 to safeguard their environments while a patch is being prepared. The urgency of this recommendation is compounded by the fact that the Clop ransomware gang has already been exploiting vulnerabilities in the software.

Details of the new SQL injection vulnerability and potential impact

The new SQL injection vulnerability could have serious consequences for affected organizations. SQL injection attacks are among the most common and damaging types of attacks. They can lead to data breaches, data loss, and even system takeover.

The vulnerability was discovered by security professionals who were assessing the software for potential weaknesses. They found that it was possible to inject SQL queries into the application’s database, which could lead to privileged access to the environment. If exploited, this vulnerability could allow an attacker to take over the system, access sensitive data, and cause significant damage to the targeted organization.

Previously discovered vulnerabilities were exploited by the Clop ransomware gang

This latest vulnerability follows two previous SQL injection vulnerabilities that were disclosed by Progress Software in July 2021. These vulnerabilities were also exploited by the Clop ransomware gang, who used them to steal data from the customers of the software.

The Clop actors have listed the names of 27 companies that they claim were hacked using the MOVEit Transfer flaw on their darknet leak portal, including multiple US federal agencies. This highlights the critical need for timely patching and robust security measures to protect against such threats.

Statistics on the industry and location of exposed hosts running MOVEit

According to Censys, a web-based search platform for assessing the attack surface of internet-connected devices, nearly 31% of over 1,400 exposed hosts running MOVEit are in the financial services industry. This suggests that attackers are targeting organizations with high-value data and assets.

Additionally, nearly 80% of the servers running MOVEit are based in the US, according to Censys. This further underscores the urgency of taking steps to secure the software against attacks.

Analysis of ransomware attacks compared to other types of malware

According to a recent analysis by Kaspersky, ransomware leads with a 58% share, followed by information stealers (24%), and botnets, loaders, and backdoors (18%). This highlights the growing risk of ransomware attacks and emphasizes the need for organizations to adopt robust security measures to protect against them.

Increased Accessibility of MaaS Schemes for Attackers

One factor that is contributing to the rise of ransomware attacks is the increasing accessibility of malware-as-a-service (MaaS) schemes. MaaS allows less technically proficient attackers to enter the fray, thereby lowering the bar for carrying out such attacks.

The revelation of a new vulnerability in Progress Software’s MOVEit Transfer application underscores the need for timely patching and adoption of robust security measures. With the Clop ransomware gang already exploiting previous vulnerabilities in the software, the risk of data breaches and system takeovers is high. Organizations should disable all HTTP and HTTPs traffic to MOVEit Transfer on ports 80 and 443 and implement additional security measures to protect against possible attacks.

Explore more

What Are the Best Data Engineering Tools Today?

The rapid evolution of data engineering tools has redefined how organizations collect, handle, and interpret data, greatly enhancing their analytics capabilities. As data landscapes grow increasingly complex, the need for efficient data engineering solutions has never been more pronounced. These tools form the backbone of any data-driven strategy, enabling companies to structure their vast data sources into meaningful insights. Data

What Are the Key Data Science Trends Revolutionizing 2025?

In the rapidly evolving landscape of data science, groundbreaking shifts are redefining how industries approach analytics and decision-making, particularly in 2025. The confluence of technological advancements in machine learning, artificial intelligence, and data processing is reshaping every corner of the business world, leaving an indelible mark on strategies and operations. As organizations grapple with vast data accumulation and heightened demand

AI’s Transformative Role in Beginner Data Analytics

Artificial Intelligence (AI) plays a significant role in reshaping the landscape of data analytics, especially for beginners. As AI continues to advance, understanding its impact becomes crucial for newcomers in the field. With AI-powered tools rapidly evolving, mastering these innovations is essential for anyone aiming to excel in data analytics. This guide explores best practices that help beginners leverage AI

Will Click to Pay Revolutionize Online Payments in Australia?

In an age where online transactions have become a cornerstone of commerce, Australian Payments Plus (AP+) is embarking on a landmark initiative to transform digital payments. With the introduction of Click to Pay, an innovative debit card payment solution, AP+, in partnership with Giesecke+Devrient (G+D), aims to address key pain points in online shopping. This initiative promises to revolutionize the

AI Revolutionizes Global Telecom Roaming Optimization

In the rapidly evolving landscape of telecommunications, Shreyash Taywade emerges as a leading figure, spearheading a transformative initiative that leverages artificial intelligence (AI) and machine learning (ML) to revolutionize international roaming optimization. As the demand for seamless connectivity and mobile data usage continues to rise exponentially, largely due to data-intensive applications, pervasive cloud services, and the escalating presence of Internet