unlock[at]rsv-box[.]com

CL0P negotiation email address published in ransom notes during the MOVEit and GoAnywhere campaigns, listed in the email-address IOC table of AA23-158A.

family

CL0P

first seen

Jun 6, 2023

publisher

CISA