Clop: Behind MOVEit Lies a Loud, Adaptable and Persistent Threat Group
Tags
country: Laos Russia Ukraine
maec-delivery-vectors: Watering Hole
attack-pattern: Data Exfiltration Over Web Service - T1567 Ingress Tool Transfer - T1544 Phishing - T1660 Phishing - T1566 Remote Access Software - T1663 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006 Remote File Copy - T1105 Remote Access Tools - T1219 Remote Desktop Protocol - T1076 Denial Of Service
Show in Graph
Common Information
Type Value
UUID 9d4522c8-ae66-438e-97c5-209a6612bd97
Fingerprint 9128815b0e8f9f94
Analysis status DONE
Considered CTI value 2
Text language
Published July 11, 2023, 4:15 p.m.
Added to db July 11, 2023, 6:33 p.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Clop: Behind MOVEit Lies a Loud, Adaptable and Persistent Threat Group
Title Clop: Behind MOVEit Lies a Loud, Adaptable and Persistent Threat Group
Detected Hints/Tags/Attributes 75/3/7
Source URLs
Redirection Url
Details Source https://www.infosecurity-magazine.com/news/clop-moveit-adaptable-persistent/
URL Provider
Details Provider Source level domain
Details infosecurity-magazine.com www.infosecurity-magazine.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 135 ✔ — https://infosecurity-magazine.com/rss/news/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 243 
cve-2023-34362
Details File 367 
readme.txt
Details MITRE ATT&CK Techniques 126 
T1567
Details MITRE ATT&CK Techniques 141 
T1219
Details MITRE ATT&CK Techniques 492 
T1105
Details Threat Actor Identifier - FIN 127 
FIN11
Details Threat Actor Identifier - FIN 377 
FIN7