ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment
ShinyHunters hijacked Cl0p's dark web leak site and issued an eight-figure extortion demand, threatening to expose victim payment records and name Cl0p operators.
The ShinyHunters extortion group defaced Cl0p's dark web leak site, demanding an unspecified eight-figure payment described as 2.333% of Cl0p's net worth, with demands increasing every 24 hours. The group named three alleged Cl0p operators and demanded proceeds from Cl0p's recent campaign exploiting Oracle E-Business Suite, a campaign that followed ShinyHunters' release of a PoC exploit on Telegram. ShinyHunters threatened to publish records showing which companies paid Cl0p, payment amounts, and Bitcoin addresses used.
- ShinyHunters seized Cl0p's leak site and demanded an eight-figure extortion payment
- Three alleged Cl0p operators publicly named in the notice
- Feud stems from Cl0p's unauthorized use of an Oracle E-Business Suite vulnerability
- ShinyHunters threatens to leak victim payment records and Bitcoin addresses
- Threat actors
- ShinyHuntersCl0p
From the original article
2 min read at therecord.mediaThe ShinyHunters extortion group hijacked the dark web leak site of the prolific Cl0p ransomware gang, according to material posted on the site over the weekend.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.