A security exploit for a file transfer tool is behind data breaches at the BBC, British Airways and more.
Attackers use unpatched exploit for Progress Software’s MOVEit Transfer product violated several large companies. TechCrunch lists the BBC, BA and the Nova Scotia government as known victims.
Microsoft Threat Intelligence linked them to an affiliate of the Clop ransomware group, which TechCrunch notes has previously targeted exploits in other file transfer tools such as GoAnywhere and typically demands payment to not publish the stolen records online.