Critical vulnerability found in Cl0p’s custom data exfiltration tool that could allow remote code execution against the criminal cybergang.

Critical vulnerability found in Cl0p’s custom data exfiltration tool that could allow remote code execution against the criminal cybergang.

A critical vulnerability has been discovered in the Cl0p cybercrime gang’s custom data exfiltration tool, which exposes the group itself to potential remote code execution (RCE) attacks. This flaw, rated with a severity score of 8.9, was found by Italian researcher Lorenzo N and detailed by the Computer Incident Response Center Luxembourg (CIRCL).