The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Fortra’s April 17, 2023 investigation summary says attackers exploited CVE-2023-0669 against some hosted GoAnywhere MFT environments from January 28–30, and that a small number of on-premises implementations with a specific configuration were also targeted, with activity reaching back to January 18. Fortra reported unauthorized accounts in some hosted environments and file downloads in a subset; its summary did not give a confirmed total number of affected customers.
What happened, and when?
Fortra said it learned of suspicious activity in certain hosted GoAnywhere MFT as a Service (MFTaaS) environments on January 30, 2023. It temporarily took the service offline and began investigating. The investigation was performed with Unit 42.
| Date | What Fortra or the government advisory reported |
|---|---|
| January 18, 2023 | Fortra later learned from customer reports that activity against a small number of on-premises implementations began on this date. |
| January 28–30, 2023 | Fortra said attackers used the previously unknown remote-code-execution vulnerability later designated CVE-2023-0669 to access certain customers’ systems. |
| January 30, 2023 | Fortra became aware of suspicious activity in some hosted MFTaaS environments, took the service temporarily offline, and started its investigation. |
| January 28–31, 2023 | Fortra found Netcat and a file named Errors.jsp in some hosted customer environments. Neither appeared in every environment. |
| April 17, 2023 | Fortra published its investigation summary. |
| June 7, 2023; updated June 16 | FBI and CISA published an advisory that included broader CL0P campaign context. |
What did Fortra find in hosted and on-premises systems?
Hosted MFTaaS environments
Fortra reported that attackers used CVE-2023-0669 to create unauthorized user accounts in some hosted customer environments. In a subset of those environments, attackers used the accounts to download hosted files. Fortra also found Netcat and Errors.jsp in some environments, but did not report that either was present in all affected instances.
Fortra said it communicated directly with affected customers, reprovisioned clean hosted environments, and worked with customers on mitigation. It reported no evidence of unauthorized access to hosted customer environments after mitigation and reprovisioning.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors#1 Best Overall
- Superior Sealing, No More Leaks or Flat Beer: Our plastic carbonation cap easily withstands 60 PSI of carbonation pressure, far exceeding the limit of low-quality plastic caps. The carbonation cap also maintains pressure overnight, keeping your beer rich in bubbles at all times.Compared to other plastic bottle filling caps, carbonation cap for sodastream bottle features a large flat internal gasket that fits tightly around the bottle mouth, completely eliminating gaps where pressure leaks
- A Convenient, Cost-Effective Tool for Homebrewers'Carbonation Needs: A carbonator bottle cap lets homebrewers control their beverage's carbonation precisely. Attach the soda bottle carbonation cap to a PET plastic bottle and connect to a CO₂ source, then regulate carbonation pressure and duration to get the desired fizziness. This feature adds a level of convenience and provide a cost-effective solution for small-scale carbonation experiments
- Sealing Gasket with Secure Retention & 5/16 Barb Fitting Spare O-Ring: The internal rubber sealing gasket of carbonator cap is precision-sized to fit snugly inside the carbonating cap. When you unscrew the bottle filling cap, the gasket stays securely in place on its own, eliminating the hassle of it falling out. Additionally, 4 spare o-ring for the 5/16" beer nipple barb is included, you'll have replacements on hand for added convenience
- Ball Lock System Compatibility & Safe Material: This CO2 bottle cap boasts a unique keg post, perfectly fitting the ball lock system. The carb cap can effortlessly connect to both gas and liquid disconnects. The included 5/16" beer hose barb not only enables carbonation but also works for liquid connections and cleaning. Crafted from food-safe plastic, it's no odors, no burrs, and has no unfinished machining, ensuring no odd tastes transfer to carbonated drinks
- Versatility in Use: Plastic carbonation caps are versatile and can serve multiple purposes in homebrewing or beverage production. Apart from carbonating beverages, they can be us ed for transferring liquids, sampling, or as a temporary closure for partially consumed carbonation cap bottle, also can run the cleaner through beer lines from a small soda bottle preventing a larger keg from wasting more CO2
On-premises implementations
Fortra said a small number of on-premises implementations with a specific configuration were targeted. This is not evidence that every on-premises GoAnywhere server was exposed. Fortra warned that internet-accessible administrative portals increased risk and noted that customers, rather than Fortra, administer on-premises infrastructure. It notified those customers that a patch was available and provided mitigation guidance and indicators of compromise.
What data access was reported?
Fortra’s public account establishes that unauthorized accounts were created in some hosted environments and that files were downloaded in a subset. Its summary does not specify the files’ contents, provide a precise count of affected customers, or establish that every targeted system had files accessed.
Rank #2
- Complete Refill Kit Contents: This propane refill kit includes 1 durable refill hose and 1 roll of gas-rated Teflon tape for secure thread sealing. The 3-foot flexible hose reduces stress on fittings, making positioning and handling easier.
- Perfect for Camping & BBQ: Suitable for camping stoves, portable grills, heaters, and outdoor cooking. This propane adapter hose is ideal for tailgating, pre-game gatherings, and RV trips—keeping your appliances fueled anywhere.
- Tool-Free Easy Operation: Simply connect the QCC1 adapter to your large tank, purge air, and fill the 1lb bottle using the control valve. No extra tools required—quick, straightforward, and hassle-free propane refilling.
- Safe Leak-Proof Design: Features a precision ON/OFF valve and leak-proof brass connectors for maximum safety. Always use in well-ventilated areas and tighten all connections before opening the valve. Stop immediately if gas odor is detected.
- Universal 1lb Bottle Compatibility: Designed for 1" x 20 female throwaway cylinder threads, this propane tank refill kit fits all standard 1 lb green propane bottles. Suitable for most standard 1 lb propane bottles used with camp stoves and grills.
The FBI and CISA advisory adds a separate assessment of the broader campaign: “Lateral movement into the victim networks from the GoAnywhere MFT was not identified, suggesting the breach was limited to the GoAnywhere platform itself.” This describes what the agencies identified from available information; it is not proof that no individual victim experienced other compromise.
What did Fortra and authorities say about scope and attribution?
Fortra’s April 17, 2023 summary stated: “At this time, we can confirm this issue was isolated to our GoAnywhere MFT solution and does not involve any other aspects of the Fortra business, or its customers.” That is Fortra’s scope statement about its investigation.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- Fits multiple sizes: this wine bag connector replacement boasts broad compatibility with a range of wine pouch sizes and nozzle shapes, ideal for varied refill applications,wine bag transfer accessory,wine transfer bib connector
- Foodgrade assurance: the wine bag transfer accessory is composed of foodgrade material that maintains wine integrity and the original aroma for enjoyment,wine pouch transfer adapter,wine bag emptying accessory
- Broad application: the wine bag connector replacement fits most wine bag mouthpieces, supporting both standard and unique packaging for widespread usability,wine bag refill accessory,wine pouch connector tool
- Taste preservation: construction of this wine bag refill tool keeps wine's original taste intact, preventing any or odor during every pour,wine pouch connector replacement,wine bag refill adapter
- Travel-friendly use: this wine bag refill accessory is compact, effortless to clean, and easy to store, suiting enthusiasts who love picnics or events away from home,wine bag refill connector,bib connector for wine bags
The FBI/CISA advisory reported that CL0P claimed approximately 130 victims over the course of 10 days. This was the group’s claim, not a victim total confirmed by Fortra. Fortra’s investigation summary does not publish a definitive number of affected customers. SecurityWeek’s contemporary report described the campaign as associated with Cl0p and noted public disclosures by organizations, but that does not independently verify the group’s asserted total.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What response steps did Fortra recommend in 2023?
These are the steps Fortra advised at the time of its 2023 investigation; they are historical guidance, not a statement of current product versions or patch instructions. For current operational decisions, consult current Fortra advisories and your organization’s incident-response team.
Quick Recap
- Apply the available patch. Fortra advised customers to patch and follow its mitigation guidance.
- Limit administrative exposure. For on-premises deployments, Fortra recommended not allowing admin portal access from the internet.
- Rotate the Master Encryption Key. Fortra listed this as a post-mitigation action.
- Reset credentials. Reset keys and passwords, including credentials used by external trading partners and systems.
- Review accounts and audit logs. Investigate activity and delete suspicious administrator and web-user accounts.
- Revoke exposed integration credentials. Determine whether credentials stored for integrated external systems may have been exposed, revoke them as appropriate, and review access logs for those external systems.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
