Clop gets a taste of its own medicine after ShinyHunters hijack leak site
ShinyHunters hijacked rival Clop's leak site, demanding an eight-figure ransom and threatening to expose past victims.
Ransomware group ShinyHunters has hijacked the dark web leak site of rival gang Clop, demanding an eight-figure payout. The attackers claim to have exploited a vulnerability in the leak site software, gaining access to Clop's infrastructure. ShinyHunters is threatening to expose companies that allegedly paid Clop to keep breaches quiet. The conflict stems from a dispute over a zero-day vulnerability in Oracle E-Business Suite (CVE-2025-61882), which both groups reportedly used.
- ShinyHunters hijacked rival Clop's dark web leak site.
- Attackers demanded an eight-figure ransom and threatened to expose past payments.
- Feud originated over a claimed zero-day in Oracle E-Business Suite (CVE-2025-61882).
- Incident highlights internal conflicts and competitive dynamics among cybercriminal groups.
From the original article
2 min read at theregister.comRival crew demands eight figures and threatens to expose companies that paid to keep quiet
By Carly Page · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.