Impact of MOVEIt file

Dec 04, 2023

Illustration: Maura Losch/Axios

The impact of a recently patched security flaw in a widely used file-transfer tool will likely linger across North America for months to come.

Why it matters: Since Progress Software Corp. first uncovered a flaw in the popular file-transfer program MOVEit Transfer, a handful of high-profile organizations — including the BBC, British Airways and the government of Nova Scotia — have publicly warned that hackers have used the flaw to target their systems.

Catch up quick: Last week, Progress warned it had uncovered a critical security flaw in the file-transfer tool that would allow hackers to gain unauthorized access to customers' networks.

The big picture: The attacks uncovered in the last week are likely only a small fraction of what's to come.

What they're saying: "This is one that you can think of more as a tornado than a hurricane," Christopher Budd, head of Sophos' X-Ops team, told Axios. "It's not going to hit everyone, but where it is hitting, it's having a significant impact."

Between the lines: One of the biggest obstacles with the MOVEit incident is understanding how attackers exploited the flaw before it was publicly reported.

The intrigue: Some organizations might not even know whether they're running the program, Budd said.

Zoom out: The Cl0p ransomware gang, in particular, has made targeting vulnerable file-transfer tools a go-to part of its strategy, the government advisory noted.

Be smart: All organizations should study their systems to see whether MOVEit is running on their network — and ask their tech vendors to do the same, Budd said.

Sign up for Axios’ cybersecurity newsletter Codebook here