Security alert: MOVEit Transfer exploited vulnerability

Expel observed active exploitation of CVE-2023-34362 in Progress MOVEit Transfer leading to deployment of a webshell (“human2.aspx”) that can create unauthorized accounts (“Health Check Service”) and enable data exfiltration or ransomware; the advisory details IOCs, recommended hunts (EDR, Azure blob/storage), removal steps (delete webshells, unauthorized users, rotate credentials/keys), and urgent patching and access-hardening measures.