Over the past several years, multiple ransomware groups and other threat actors have exploited vulnerabilities in the managed file transfer (MFT) applications that organizations rely on to enable secure remote access to business documents. Researchers from IBM have analyzed the components of 13 of these solutions and built a framework that can help defenders quickly build detections and incident response playbooks for their exploitation.
