In 2023, Emerson, a multinational technology and engineering company based in the USA, fell victim to a targeted cyberattack by the CL0P Ransomware Gang. The attackers exploited a critical vulnerability in Progress Software’s MOVEit Transfer, a widely used file transfer tool. By deploying a malicious web shell named LEMURLOOT, the threat actors infiltrated MOVEit Transfer databases and exfiltrated sensitive corporate data. The breach prompted a joint Cybersecurity Advisory from CISA and the FBI, which detailed the indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) used in the attack. While the advisory did not specify the exact nature of the stolen data, the involvement of a ransomware group and the theft of corporate information suggest severe operational and financial risks. Emerson was urged to implement mitigation measures to prevent further compromise, aligning with the broader #StopRansomware initiative aimed at combating such threats. The incident underscores the growing sophistication of ransomware attacks leveraging zero-day vulnerabilities in third-party software to target high-profile organizations.