{"id":1152,"date":"2023-07-10T11:54:17","date_gmt":"2023-07-10T11:54:17","guid":{"rendered":"https:\/\/certerassl.com\/blog\/?p=1152"},"modified":"2023-07-10T11:54:19","modified_gmt":"2023-07-10T11:54:19","slug":"ucla-falls-victim-to-global-cyber-attack","status":"publish","type":"post","link":"https:\/\/certera.com\/blog\/ucla-falls-victim-to-global-cyber-attack\/","title":{"rendered":"UCLA Falls Victim to Global Cyber Attack"},"content":{"rendered":"\n

Worldwide Threat of Ransomware Targets Institutions and Companies<\/h2>\n\n\n\n

In a recent wave of cyber attacks targeting institutions and companies worldwide, the University of California, Los Angeles (UCLA) has confirmed<\/a> its inclusion among the victims. The attack has been attributed to a notorious ransomware gang known as “CL0P<\/strong>,” as declared by government officials.<\/p>\n\n\n\n

Upon discovering the breach, UCLA promptly alerted the Federal Bureau of Investigation (FBI) and collaborated with external cybersecurity experts to launch an investigation. <\/p>\n\n\n\n

The university’s spokesperson, who chose not to disclose their identity or provide an interview, acknowledged the incident. However, they declined to disclose the nature of the stolen data or the extent of the impact on individuals within the UCLA community.<\/p>\n\n\n\n

IN CONJUNCTION WITH THE FBI, the U.S. Cybersecurity and Infrastructure Security Agency issued bulletins revealing that the CL0P group exploited a previously unidentified software vulnerability, commonly referred to as a ‘zero day’ exploit, beginning in May 2023. The hackers targeted applications linked to a file transfer system called “MOVEit.”<\/p>\n\n\n\n

CISA disclosed that the CL0P hackers infected internet-facing MOVEit Transfer web applications with their specific malware, enabling them to pilfer data from the underlying MOVEit Transfer databases. Progress Software, the owner of MOVEit, acknowledged the incident and confirmed its dedication to assisting customers in patching the vulnerabilities while cooperating with authorities during the investigation.<\/p>\n\n\n\n

In an email response to inquiries, an unnamed spokesperson from Progress Software stated, “We have engaged with federal law enforcement and other agencies and are committed to playing a collaborative role in the industry-wide effort to combat increasingly sophisticated and persistent cybercriminals intent on maliciously exploiting vulnerabilities in widely used software products.”<\/p>\n\n\n\n

According to security researcher Brett Callow from Emsisoft, the CL0P group is believed to operate from Russia or Eastern Europe. The group has a track record of conducting cyber attacks and often resorts to demanding ransom payments. <\/p>\n\n\n\n

\n

There are now 148 known #MOVEit<\/a> victims, 11 of which have disclosed the number of individuals affected by the breaches, which currently totals 16,212,552. That number will increase significantly if\/when the other 137+ victims make a disclosure. 2\/2<\/p>— Brett Callow (@BrettCallow) June 29, 2023<\/a><\/blockquote>