A global cyberattack has hit multiple U.S. government agencies, federal officials said Thursday, joining a string of recent hacks that target a vulnerability in a widely used file-transfer software. The Cybersecurity and Infrastructure Security Agency said in a statement it is "working urgently to understand impacts and ensure timely remediation.”
The Cybersecurity and Infrastructure Security Agency said in a statement it is "working urgently to understand impacts and ensure timely remediation.”
Eric Goldstein, executive assistant director for cybersecurity, said the hackers targeted the MOVEit software, which has been the access point for several other recent attacks later claimed by the Russian-speaking hacking group CLOP.
CISA hasn’t explicitly blamed CLOP or any other organization for the cyberattacks, and it is not yet clear if the attacks are related to the growing number of hacks hitting state governments, universities and other agencies, including the Shell company, BBC, British Airways and Johns Hopkins University.
News of the attack comes less than a month after Microsoft said a state-sponsored Chinese hacking group had been spying on “critical” infrastructure organizations. It is unclear exactly how many organizations were affected, but the National Security Agency said it was working with partners including Canada, New Zealand, Australia, and the UK, as well as the U.S. Federal Bureau of Investigation to identify breaches, Reuters reported.
This is a breaking story and will be updated.
Understanding Cyber Threat Intelligence For Business Security (Forbes)
The Future Of Cyber Espionage, The Uncomfortable Truth In The Near And Distant Future (Forbes)