Skip to content
NewA calmer, faster ZeroHour
RansomwaremediumExploited in the wild

ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment

The Record ()2 min read1 · 1 read
AI summary · glm-5.3Summaries by Vani AI

ShinyHunters hijacked Cl0p's dark web leak site and issued an eight-figure extortion demand, threatening to expose victim payment records and name Cl0p operators.

The ShinyHunters extortion group defaced Cl0p's dark web leak site, demanding an unspecified eight-figure payment described as 2.333% of Cl0p's net worth, with demands increasing every 24 hours. The group named three alleged Cl0p operators and demanded proceeds from Cl0p's recent campaign exploiting Oracle E-Business Suite, a campaign that followed ShinyHunters' release of a PoC exploit on Telegram. ShinyHunters threatened to publish records showing which companies paid Cl0p, payment amounts, and Bitcoin addresses used.

Key facts
  • ShinyHunters seized Cl0p's leak site and demanded an eight-figure extortion payment
  • Three alleged Cl0p operators publicly named in the notice
  • Feud stems from Cl0p's unauthorized use of an Oracle E-Business Suite vulnerability
  • ShinyHunters threatens to leak victim payment records and Bitcoin addresses
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

2 min read at therecord.media

The ShinyHunters extortion group hijacked the dark web leak site of the prolific Cl0p ransomware gang, according to material posted on the site over the weekend.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.