Rise of CI0p Ransomware

Arctic Wolf outlines active exploitation of critical MOVEit Transfer vulnerabilities—initially CVE-2023-34362—by the Cl0p/CI0p ransomware group, resulting in widespread data exfiltration and public leak postings across hundreds of organizations (predominantly in the U.S.). The report details affected industries and organization sizes, notes additional disclosed MOVEit CVEs, and emphasizes patching, mitigations, and Arctic Wolf’s MDR and Managed Risk services to detect, contain, and remediate incidents.