Security News > 2023 > July > Clop gang to earn over $75 million from MOVEit extortion attacks
The chart shows that extortion attacks with the lowest complexity and automation have the least impact on victims and cost to the attackers.
On May 27th, the Clop ransomware gang began widespread data-theft attacks exploiting a zero-day vulnerability in the MOVEit Transfer secure file transfer platform.
Coveware says that extortion attacks focusing only on data theft have decreased payments over time, with victims rather disclosing the attacks and issuing data breach notifications than paying the threat actors.
"MOVEit had at least 10x more direct victims than both of these attacks, so CloP was able to focus on just the very largest and most likely to consider paying, even with well over 90% victims not even bothering to engage in a negotiation, let alone paying."
Clop ransomware claims responsibility for MOVEit extortion attacks.
Microsoft links Clop ransomware gang to MOVEit data-theft attacks.