topic Re: Microsoft: SysAid zero-day flaw exploited in Clop ransomware attacks in Threats

Microsoft: SysAid zero-day flaw exploited in Clop ransomware attacks

Kyaw_Myo_Oo — Thu, 09 Nov 2023 18:29:00 GMT

Dear All,

Threat actors are exploiting a zero-day vulnerability in the service management software SysAid to gain access to corporate servers for data theft and to deploy Clop ransomware.

SysAid is a comprehensive IT Service Management (ITSM) solution that provides a suite of tools for managing various IT services within an organization.

Microsoft: SysAid zero-day flaw exploited in Clop ransomware attacks (bleepingcomputer.com)

Re: Microsoft: SysAid zero-day flaw exploited in Clop ransomware attacks

Early_Adopter — Thu, 09 Nov 2023 23:51:22 GMT

And now they’ve added the Clop deployment service… maybe they should call it Clip?

Always keep Tomcat and other components up to date, just in case.

When you build your product always include abuse case testing based on what attackers want.

https://profero.io/posts/sysaidonpremvulnerability/

Re: Microsoft: SysAid zero-day flaw exploited in Clop ransomware attacks

Kyaw_Myo_Oo — Thu, 16 Nov 2023 17:27:18 GMT

Thank you dear for your information @Early_Adopter