06/27/2024
A fresh security vulnerability has been discovered in the MOVEit Managed File Transfer solution, affecting the SSH File Transfer Protocol (SFTP) in the MOVEit Transfer.
Read full article here: https://sharkstriker.com/blog/moveit-under-attack-once-again-critical-vulnerability-exploited-at-large-cve-2024-5806/
Within limited scenarios, the vulnerability could allow attackers to bypass authentication. MOVEit has a history of being targeted highly by ransomware gangs, specifically by Cl0p.
Last year, Cl0p exploited the MOVEit Transfer tool to infect it with malware, encrypting users' sensitive files by attacking the servers. Cl0p targeted more than 150 organizations worldwide, impacting 16 million individuals worldwide.
MOVEit Transfer was found with another critical vulnerability (CVE-2024-5806), actively targeted by ransomware attackers worldwide. Discover the steps to defend against the vulnerability with SharkStriker’s actions and recommendations.