Cybersecurity incident
Date: 2023-06-01 00:00:00
Affected organization: Shell Oil Company
Affected country: United States of America
Industry: Mining, Quarrying, and Oil and Gas Extraction
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: cl0p
Actor type: Criminal
Actor country: Russian Federation
Description: Threat actors are actively exploiting a zero-day vulnerability in the MOVEit Transfer file transfer software, tracked as CVE-2023-34362, to steal data from organizations. Few days later the Clop ransomware gang claims responsibility for the attacks and starts extorting companies impacted by the data theft attacks,