Global Hacking Campaign Targets US Government Agencies

In a recent development, several U.S. government agencies have been affected by a global hacking campaign. This campaign exploited a vulnerability in MOVEit, a widely-used file transfer software, as reported by the United States Cybersecurity and Infrastructure Security Agency (CISA). Eric Goldstein, CISA’s executive assistant director for cybersecurity, confirmed the intrusions and stated that the agency is actively working to understand the impacts and ensure timely remediation.

As of now, the extent of the impact and specific details of the breaches have not been disclosed by CISA. Additionally, requests for further information from the FBI and US National Security Agency by Reuters news agency remain unanswered.

Jen Easterly, the director of CISA, in an interview with MSNBC, stated that the United States does not anticipate any significant impact from this cyberattack. The agency is in the process of assessing the full impact of the attack and is coordinating with other agencies to facilitate remediation efforts.

MOVEit, developed by Progress Software Corp, is a tool commonly utilized by organizations for secure file transfers, often employed in scenarios such as financial institutions requiring data uploads for loan applications.

John Hammond, a senior researcher at Huntress, a security firm, emphasized the broad potential for exploitation due to the software’s widespread use.

The online extortion group Cl0p, which has claimed responsibility for the MOVEit hack, has stated that they do not intend to exploit data taken from government agencies.

Earlier this month, cybersecurity officials from the US and UK warned about the global impact of this breach, given the popularity of MOVEit among businesses. Among the entities affected by this hack were Zellis, a major payroll services provider in the UK, and UK chemist chain Boots.

Microsoft reported last month that Chinese state-sponsored hackers had launched attacks against critical infrastructure in the United States.

Find the latest supply chain report news at The Supply Chain Report. For international trade tools, see ADAMftd.com.

#USCyberAttack #MOVEitBreach #CISA #FBI #NSA #Cl0p #ProgressSoftware #Huntress #Zellis #BootsUK #CyberSecurity #FileTransferVulnerability #GovernmentCyberAttack #USNationalSecurity #DataBreach #CyberAttackImpact #CriticalInfrastructureSecurity #GlobalCyberThreat #CyberExtortion #MicrosoftSecurity #ChineseHackers #FinancialDataSecurity