Ransom Ledger

Clop

Also known as Cl0p, TA505 (linked)

Specialises in mass theft through holes in file-transfer software rather than encryption. The 2023 MOVEit campaign alone reached an estimated 2,773 organisations.

What it is
Extortion group
Based
Russian-speaking
Active
2019–
Status
Active

On the record

  1. Jun 2024 · Emsisoft

    Emsisoft's final tally of the MOVEit campaign: 2,773 organisations and about 95.8 million people

  2. Sep 2023 · TechTarget

    Clop's MOVEit attacks pass 2,000 organisations