Progress Urges ShareFile Customers to Shut Down Storage Zone Controller Servers

Summary

Progress told ShareFile customers using Storage Zone Controllers to shut down their servers after identifying a credible external threat. Access was temporarily disabled; the company said it had no indication of unauthorized access while it investigates.

Key points

Progress described a credible external security threat targeting ShareFile Storage Zone Controllers.
Customers were instructed to manually shut down the Windows servers hosting the controllers.
Progress temporarily disabled access to ShareFile accounts using Storage Zone Controllers.
Progress said it had no indication of unauthorized access to ShareFile accounts or data; no compromise has been confirmed.
The company is investigating with internal and external cybersecurity experts and planned to update customers within 24 hours.
Progress has not disclosed whether the threat involves a zero-day vulnerability or whether any controllers were compromised.

Article Details

Event Type: Progress warned of a credible external security threat targeting on-premises ShareFile Storage Zone Controllers.
Impact: Progress temporarily disabled access to ShareFile accounts using Storage Zone Controllers and instructed customers to shut down the Windows servers hosting them. The company reported no indication of unauthorized access to ShareFile accounts or data; whether any controllers were compromised or a zero-day vulnerability was involved has not been disclosed.

Threat Actors

ClopThe article reports that Clop exploited a zero-day vulnerability in Progress MOVEit Transfer in 2023 to steal data from thousands of organizations and conduct an extortion campaign.

Vendors

Progress SoftwareProgress Software has warned ShareFile customers using Storage Zone Controllers to immediately shut down their servers after detecting a credible external threat.

Products

Progress MOVEit TransferThe company has temporarily disabled access as it investigates, drawing concern after past attacks on Progress software such as MOVEit Transfer by Clop, though no unauthorized access has been confirmed.ShareFileProgress Software has warned ShareFile customers using Storage Zone Controllers to immediately shut down their servers after detecting a credible external threat.Storage Zone ControllersProgress Software has warned ShareFile customers using Storage Zone Controllers to immediately shut down their servers after detecting a credible external threat.