2023年6月22日

新的受害者站出來證實,他們的數據是通過利用漏洞訪問MOVEit文件傳輸工具——一個戰術網絡罪犯已經使用在一些備受矚目的事件在過去的三個星期。網絡巨頭創——擁有知名品牌像諾頓,停住,LifeLock,小紅傘,AVG, ReputationDefender CCleaner——記錄未來的消息證實,一些員工的數據訪問。創發言人說員工使用MOVEit進行文件傳輸,和公司開始調查後發現惡意活動。這一事件“沒有影響”公司的IT係統,服務或客戶信息,該發言人說。“不幸的是,一些個人信息創員工和工人隊伍的影響,包括信息,如名稱、公司郵件地址,員工身份證號碼,和在一些有限的情況下,家庭住址和出生日期,”這位發言人說。“我們立即調查的範圍問題,已經通知有關數據保護法規和我們的員工,其數據可能受到影響。“這是第二個事件影響公司今年動態和靜態諾頓帳戶被鎖定在925000年之後由於廣泛的憑據填料事件,攻擊者會使用大的列表之前泄露的用戶名和密碼來訪問帳戶。溫哥華,密蘇裏大學和創宣布MOVEit-related並不是唯一的問題。地鐵溫哥華的交通警察,密蘇裏大學和科羅拉多州立機構證實,他們正在調查事故的剝削MOVEit實例。密蘇裏大學的一位發言人證實,學校正在調查一個安全漏洞後,馬蹄聲ransomware組命名的學校作為一個受害者。 Since last week, the gang has posted dozens of high profile victims it allegedly attacked through the MOVEit file transfer software. The victims range from high-profile businesses to several banks, hospitals and universities. The Metro Vancouver Transit Police published a statement saying hackers accessed 186 files that had been transferred using MOVEit. The organization said it is still examining what data is in the files but confirmed that the hackers never had access to the Transit Police network. They added that the Royal Canadian Mounted Police is also leading an investigation into what happened. Colorado joined several other U.S. states in announcing MOVEit breaches, with its Department of Health Care Policy & Financing confirming that it is in the process of investigating an incident involving the data of state residents. “Early analysis indicates that it is reasonable to believe personal identifiable information of individuals served by Health First Colorado (Colorado’s Medicaid program), the Child Health Plan Plus (CHP+) - the state’s safety net health coverage programs - could have been impacted,” the state said, adding that anyone who has “applied for or have been covered anytime since 2015 by Health First Colorado or Child Health Plan Plus” needs to protect themselves. “As soon as the agencies have determined the extent of and the specifics related to the impact, HCPF will directly notify individuals. Concurrent to this work, HCPF experts are working with the national third party vendor to investigate and address the cybersecurity intrusion with the specific goal of preventing any further data file compromises.” The controversy around MOVEit continues to expand just weeks after the software’s first vulnerability was discovered. As of Wednesday, at least three federal U.S. agencies — the departments of Energy and Agriculture as well as the Office of Personnel Management — were affected by the issue. CISA Director Jen Easterly said “several” federal agencies were impacted but would not say how many. In addition to the federal agencies, organizations affected include: U.S. state-level agencies in Illinois, Missouri , Minnesota , Oregon and Louisiana Oil giant Shell Schools like Johns Hopkins University, the University of Georgia and the University of Rochester