ClosedHighPatched
Day · Feb 10, 2023
Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims
Fortra GoAnywhere MFT
Updates on Feb 10, 2023
CISA adds CVE-2023-0669 to KEV; Cl0p claims it breached over 130 organisations
Source
Summary
A pre-auth deserialization/command injection in the GoAnywhere MFT admin console's License Response Servlet was exploited as a zero-day. The Cl0p gang said it stole data from more than 130 organisations, a rehearsal for the later MOVEit campaign.
Read the full incident →
