Termite Takes a Bite: Cleo’s File Transfer Software Under Siege by Ransomware Attacks
Ransomware group Termite is back, targeting Cleo’s file transfer software with a zero-day vulnerability. Researchers report at least 10 victims, and the number may be higher. Cleo scrambles to patch the flaw, while experts suggest hiding affected systems behind a firewall to avoid becoming an unwilling participant in Termite’s latest heist.

Hot Take:
When “Termite” isn’t busy gnawing through your wooden porch, it’s out there munching on your digital infrastructure like a buffet. Forget pest control, it’s time for pest prevention on your servers!
Key Points:
- Ransomware group “Termite” is exploiting a zero-day vulnerability in Cleo’s file transfer software.
- The attacks have targeted multiple sectors, including consumer products and food industries.
- Huntress Labs identified the vulnerability as CVE-2024-50623, affecting versions of Cleo Harmony, VLTrader, and LexiCom.
- Cleo is working on a new patch, while organizations are advised to mitigate exposure by hiding vulnerable systems behind a firewall.
- Termite is being compared to the notorious Cl0p ransomware group due to similar operational tactics.
Already a member? Log in here