As of May 27, 2025, there has been an increase in scanning activity targeted MOVEit Transfer systems.
GreyNoise notes that before this date, scanning was typically observed in less than 10 IPs per day. On that date, the total rose to more than 100 unique IPs. May 28, 2025 saw 319 IPs. Since this noted increase, the daily scanner IP amount has stayed between 200 to 300 IPs. These findings suggest that MOVEit Transfer may be in the midst of threat activity.
Educational Webinars, Videos & Podcasts: Receive cutting-edge insights and invaluable resources, empowering you to stay ahead in the dynamic world of security.
Empowering Content: At your computer or on-the-go, stay up-to-date when you receive our eNewsletters curated with the latest technology and services that address physical, logical, cyber and enterprise resilience.
Unlimited Article Access: Dive deep into the world of cybersecurity and risk management leadership with unlimited access to our library of online articles.