Active exploitation of the MOVEit Transfer vulnerability - CVE-2023-34362 - by Clop ransomware group

Cisco Talos is monitoring recent reports of exploitation attempts against CVE-2023-34362, a SQL injection zero-day vulnerability in the MOVEit Transfer managed file transfer (MFT) solution that has been actively targeted since late May 2023.

cisco cisco talos clop clop ransomware cve cve-2023-34362 exploitation file file transfer injection landing page top story malware managed managed file transfer may may 2023 mft monitoring moveit moveit transfer ransomware ransomware group reports solution sql sql injection talos threat advisory top story transfer vulnerability zero-day zero-day vulnerability