A reward of $10 million has been announced for information that will help identify members of the group.
The U.S. has offered a $10 million reward for information that will help uncover the identities of the Russian Clop hackers responsible for a series of ransomware cyberattacks. Clop is notorious for demanding huge ransoms from its victims in order to recover or not disclose stolen data. Among those affected by its actions were such well-known companies as Shell, Bombardier and British Airways, as well as the prestigious universities of Stanford and Minnesota.
The Clop group exploits vulnerabilities in file transfer software such as MOVEit Transfer, Accellion FTA, and Fortra/Linoma GoAnywhere MFT. After infiltrating web applications, Clop installs the LEMURLOOT web shell, which gives her access to data from databases. Clop then encrypts the files on the victims' computers and posts the ultimatums on its dark web site.
Representatives of the US Department of Justice said that the reward will be paid to those who provide information about the leaders or key members of the Clop group, as well as any individuals or organizations that support it in its activities. In addition, the US has set up a special anti-ransomware task force that will coordinate the efforts of various law enforcement and intelligence agencies.
This is not the first time the US has offered a reward for information about hackers. Previously, the US announced rewards for information about the Chinese hackers APT10 and APT41, as well as Russian hackers from the Evil Corp and Sandworm groups. In some cases, rewards were as high as $10 million.