Clop gets a taste of its own medicine after ShinyHunters hijack leak site
Rival crew demands eight figures and threatens to expose companies that paid to keep quiet
Rival cybercrime crew ShinyHunters has taken control of Clop's leak site and is now demanding an eight-figure ransom. The intrusion occurred over the weekend when the tagline "rooting your systems since 19 ;)" was replaced with a large "DOMAIN SEIZED BY SHINYHUNTERS" banner. ShinyHunters claims to have exploited a software vulnerability, granting them extensive access to Clop's infrastructure.
The group asserts it has been a long-standing feud, dating back to Clop's attacks on Oracle E-Business Suite customers last year. ShinyHunters now seeks a share of the proceeds, threatening to publish the names of companies that allegedly paid Clop and the amounts involved. The clash has the potential to damage Clop's reputation further, as leak sites are meant to demonstrate control and possession of stolen data.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.