SecurityScorecard Identifies Infrastructure Linked to Widespread MOVEit Vulnerability Exploitation

SecurityScorecard’s STRIKE team analyzes widespread exploitation of the critical MOVEit vulnerability (CVE-2023-34362) attributed to the Cl0p ransomware group, identifying webshells on compromised servers, extensive distributed scanning activity, specific IoCs (scanning and exfiltration IPs), evidence of multi-GB data transfers consistent with exfiltration, and affected organizations across government, healthcare, energy, education, and retail sectors.