ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
Extortion group ShinyHunters hacked the Clop ransomware gang's leak site, defacing it and stealing server data and onion service private keys.
ShinyHunters breached the Clop (Cl0p) ransomware operation's Tor data leak site on Friday night, defacing it and allegedly stealing server data plus the private keys for its onion service. The attackers claim they exploited an unauthenticated file upload vulnerability in Grav CMS. ShinyHunters is reportedly threatening to extort the ransomware gang itself.
- Clop leak site defaced on Tor; server data and onion service keys allegedly stolen.
- Attack used a claimed unauthenticated file upload vulnerability in Grav CMS.
- ShinyHunters threatens to extort the Clop ransomware operation.
- Vendors
- Grav CMS
- Threat actors
- ShinyHuntersClop
From the original article
Lawrence Abrams reports: The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation’s data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service. The attack began Friday night when ShinyHunters exploited what they claim is an unauthenticated file upload vulnerability in Grav CMS, which... Source
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.