Security News > 2023 > June > PoC exploit for exploited MOVEit vulnerability released (CVE-2023-34362)

As more victim organizations of Cl0p gang's MOVEit rampage continue popping up, security researchers have released a PoC exploit for CVE-2023-34362, the RCE vulnerability exploited by the Cl0p cyber extortion group to plunder confidential data.

Rapid7 has released an analysis of the vulnerability and a full exploit chain for CVE-2023-34362.

Organizations using on-prem MOVEit Transfer or the cloud service should check for evidence of compromise and data theft.

Transport for London told the BBC that one of its contractors had suffered a data breach, and that the stolen data did not include banking details or passenger data.

"No financial information was included in any of the files in this data breach. To date there have been no ransom demands nor is MDE aware that the data has been shared or posted online."

Ryan McConechy, CTO at Barrier Networks, told Help Net Security that with confidential data belonging to Ofcom now in the hands of criminals, these individuals and organizations will be at a heightened risk of phishing scams.

News URL

https://www.helpnetsecurity.com/2023/06/13/cve-2023-34362-exploit/