Kevin Beaumont on Nostr: Cl0p have started publishing the stolen Cleo MFT data. Have confirmed with one of the ...
Cl0p have started publishing the stolen Cleo MFT data. Have confirmed with one of the victim orgs it came from their Cleo server. #cleo #threatintel #ransomware
Published at
2025-01-24 13:30:47Event JSON
{
"id": "b8842a970a4fb513a99a38876bba9c4016a85c2906e892e5d712cc1212d55c62",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1737725447,
"kind": 1,
"tags": [
[
"e",
"028c6cc05d9c3d5256573c96cb20753f77af08a81bd80d53a9a756a5eb264737",
"wss://relay.mostr.pub",
"reply"
],
[
"t",
"cleo"
],
[
"t",
"threatintel"
],
[
"t",
"ransomware"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/113883574933920497",
"activitypub"
]
],
"content": "Cl0p have started publishing the stolen Cleo MFT data. Have confirmed with one of the victim orgs it came from their Cleo server. #cleo #threatintel #ransomware",
"sig": "625551f8e85c7928850bf67bfae5768bede08a71d2740eb6480a6e2ae79b372abfd69bc81e573a2131f30934d31e79303fabeee3d964643f6afacd4b485dab1e"
}
