Ransomware gang haunted US firms long before MOVEit hack

Cybercrime experts say they first came to know of the group’s malware in 2019, when it launched a phishing campaign as part of a series of ransomware attacks against Korean companies and US academic institutions. — Dreamstime/TNS

Shell Plc, IAG SA’s British Airways, the British Broadcasting Corp, the state of Minnesota’s Department of Education, multiple federal agencies – they’re among the victims of the latest data breach launched by Clop, a Russian-speaking hacking group that’s attacking targets around the world in both the public and private sectors.

The Clop gang, also known as Cl0p, is known for "driving global trends in criminal malware distribution,” according to the US Cybersecurity and Infrastructure Security Agency, or CISA.