Illinois DoIT Ransomware Attack: Cybercriminals Exploited a Critical Vulnerability! | June 10, 2023
Channel: Hacking Space Frontier
Date: 2023-06-10

Illinois recently fell victim to a ransomware attack where cybercriminals exploited a vulnerability in a widely used third-party file transfer system. The attack occurred on May 31 and has been attributed to the CL0P Ransomware Gang, also known as TA505, by the Cybersecurity and Infrastructure Security Agency (CISA) and FBI.

The attackers took advantage of a previously unknown structured query language injection vulnerability in the MOVEit Transfer system. They infected the system's web applications with specific malware, allowing them to steal data from the program's databases.

Immediately after the attack, the Illinois Department of Innovation and Technology (DoIT) disconnected all affected systems that used the compromised third-party software. They also deployed their security incident response team to conduct a forensic analysis of the incident.

While the full impact of the attack is still being assessed, it is expected to affect a significant number of people. Once a complete evaluation is completed, the DoIT plans to issue a public notice regarding the incident as quickly as possible. They will also establish a call center to provide assistance to those affected by the attack.