Exploitation of the MOVEit file transfer application linked to the Cl0p ransomware group has not resulted in the deployment of ransomware or the compromise of entire organizations, according to new research from Huntress. In a blog post July 7, Huntress researchers said the tactics as documented by Huntress and others indicates that initial access was used to deploy a web shell that the attackers could use to copy and exfiltrate files.

Source: SC Magazine