Termite Ransomware Plague: Cleo’s File Transfer Tools Under Siege!
The Termite ransomware group might be behind recent attacks exploiting a vulnerability in Cleo’s file transfer tools. Despite Cleo’s attempts to fix the flaw, hackers have been running amok like kids at a candy store since December. Sophos notes that retail organizations in North America are prime targets, making this a cybersecurity nightmare.

Hot Take:
Just when you thought you’d patched all the holes, along comes Termite, chewing its way through your file transfer tools faster than you can say “version 5.8.0.21”. Cleo’s got more bugs than a summer picnic, and the hackers are here to feast!
Key Points:
- A vulnerability in Cleo’s file transfer tools has been exploited since December 3, despite an attempted patch.
- The Termite ransomware group is suspected to be behind these attacks, affecting at least 1,700 servers.
- Targeted sectors include retail, consumer products, food, trucking, and shipping industries in North America.
- Termite previously targeted Blue Yonder, claiming 680 Gb of data theft.
- Cleo plans to release another patch, version 5.8.0.23, to address the “unauthenticated malicious hosts vulnerability”.
Already a member? Log in here