• Top file-sharing tools are being hit by security attacks once aga

    From TechnologyDaily@1337:1/100 to All on Wednesday, December 11, 2024 10:30:05
    Top file-sharing tools are being hit by security attacks once again

    Date:
    Wed, 11 Dec 2024 10:24:39 +0000

    Description:
    A bug, allowing data exfiltration in top file-sharing tools, is being abused in the wild, experts warn.

    FULL STORY ======================================================================Security
    researchers Huntress uncover flaw in LexiCom, VLTransfer, and Harmony tools The flaw was patched more than a month ago, but the patch did not work Now hackers are abusing the bug, possibly to steal data

    Multiple managed file transfer tools from the same developer are being abused to launch attacks and possibly steal data, experts have warned, with dozens
    of organizations already targeted.

    Cybersecurity researchers at Huntress have claimed LexiCom, VLTransfer, and Harmony were all vulnerable to CVE-2024-50623, an unrestricted file upload
    and download vulnerability that could lead to remote code execution.

    All three tools were built by the same company, Cleo, which published a patch for the bug in late October 2024 - however, Huntress claims that the patch doesnt work well and doesnt protect the users from threat actors. Post-exploitation activity

    In fact, Huntress, which says its tools protect more than 1,700 Cleo users, claims it spotted at least 24 compromised businesses.

    Victim organizations so far have included various consumer product companies, logistics and shipping organizations, and food suppliers, Huntress said in
    its writeup, adding that countless other companies are at risk.

    TechCrunch added that Shodan shows hundreds of vulnerable Cleo servers, mostly in the United States. The company has more than 4,000 clients, including a number of large enterprises.

    The attackers have not yet been identified, and Huntress is not conclusively saying if they stole any information from these organizations. However, the researchers did say that the threat actors were running post-exploitation activity, which could hint that files were, indeed, stolen.

    Cleo acknowledged the flaw, and confirmed the team was working on a further fix, but until that is released, users should put the tools behind a
    firewall, just to be on the safe side.

    Managed file transfer (MFT) solutions and security issues started grabbing headlines in 2023, when a Russian ransomware group Cl0p found a hole in
    MOVEit and used it to exfiltrate data from thousands of organizations around the world.

    Via TechCrunch You might also like US government agency confirms it was hit by major ransomware attack Here's a list of the best antivirus offerings around These are the best endpoint protection tools right now



    ======================================================================
    Link to news story: https://www.techradar.com/pro/security/top-file-sharing-tools-are-being-hit-by -security-attacks-once-again


    --- Mystic BBS v1.12 A47 (Linux/64)
    * Origin: tqwNet Technology News (1337:1/100)