Progress Software

US federal government agencies and 'several hundred' US companies and organizations have been compromised by a global cyberattack perpetrated by Russian cybercriminals. The attackers exploited a vulnerability in MOVEit, a file transfer software developed by Progress Software. The Department of Energy confirmed breaches, including one affecting a not-for-profit research center and another associated with waste disposal for atomic energy. Hospitals, universities, and state governments have also felt the impact of the attack. The Clop ransomware group, although demanding multimillion-dollar ransoms generally, has not targeted federal agencies for payment. As the attack unfolded, Progress Software identified a further vulnerability in MOVEit and took swift measures to resolve it, while also taking MOVEit Cloud offline. The breadth of the attack highlights the growing threat of ransomware and other cyberattacks to institutions and infrastructure across the United States.

Source: https://www.cnn.com/2023/06/15/politics/us-government-hit-cybeattack/index.html

"id": "pro340051324",
"linkid": "progress-software",
"type": "Ransomware",
"date": "03/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"