ClosedHighPatched
Day · Feb 1, 2023
Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims
Fortra GoAnywhere MFT
Updates on Feb 1, 2023
Fortra privately warns customers of an actively exploited zero-day in the GoAnywhere admin console
Source
Summary
A pre-auth deserialization/command injection in the GoAnywhere MFT admin console's License Response Servlet was exploited as a zero-day. The Cl0p gang said it stole data from more than 130 organisations, a rehearsal for the later MOVEit campaign.
Read the full incident →
