Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App

Microsoft has officially linked the ongoing active exploitation of a critical flaw in the Progress Software MOVEit Transfer application to a threat actor it tracks as Lace Tempest.
"Exploitation is often followed by deployment of a web shell with data exfiltration capabilities," the Microsoft Threat Intelligence team said in a series of tweets today. "CVE-2023-34362 allows attackers to

actor app application capabilities critical critical flaw data data exfiltration deployment exfiltration exploitation flaw hackers intelligence microsoft moveit moveit transfer progress progress software shell software team threat threat actor threat intelligence web web shell