Clop, Fin11 Hacker Groups Exploit Accellion Zero-Days in Recent Data Theft and Extortion Attacks

The attacks, which began in December, involved exploiting multiple zero-day flaws in the legacy FTA software to install a new web shell named DEWMODE on victim networks and stealing sensitive data.