Cybersecurity
ShinyHunters takes over Cl0p leak site
ShinyHunters said it had seized Cl0p’s leak site, demanded an extortion payment and linked the dispute to Oracle’s E-Business Suite campaign and earlier threats against its members.
- Messages posted on Cl0p’s leak site over the weekend purported to come from ShinyHunters and claimed the domain had been seized.
- The messages set an unspecified eight-figure payment and described it as 2.333% of Cl0p’s net worth.
- ShinyHunters said the demand would rise every 24 hours and later added a request for a public apology.
- The group also sought proceeds from Cl0p’s recent campaign against Oracle’s E-Business Suite, and Oracle, the FBI and cybersecurity agencies in the United Kingdom and Singapore had warned about those attacks.
Messages posted on Cl0p’s dark web leak site over the weekend purported to come from ShinyHunters and said the site had been taken over. The site had been used by Cl0p for years to name victims and pressure them into paying.
The messages set an unspecified eight-figure demand and described it as 2.333% of Cl0p’s net worth. They also said the amount would increase every 24 hours if Cl0p did not reply, and by Monday the demands had grown to include a public apology.
A Sunday message named three people identified in public reporting as Cl0p operators. It also asked for proceeds from Cl0p’s recent campaign against Oracle’s E-Business Suite, plus more.
ShinyHunters said its dispute with Cl0p followed Cl0p’s unauthorised use of the Oracle vulnerability and threats against one of its members. The article also said ShinyHunters had released a proof-of-concept exploit for the vulnerability on Telegram.
Named in this story
Companies
- Oracle
- issued warnings about attacks on its E-Business Suite
Organisations
- ShinyHunters
- said it had seized Cl0p’s leak site and set the extortion demand
- Cl0p
- was the ransomware gang whose leak site was taken over and whose operators were named
Governments and agencies
- FBI
- issued warnings about the E-Business Suite attacks
Products and systems
- Oracle’s E-Business Suite
- was the software targeted in the campaign tied to the dispute
Places
- United Kingdom
- was one of the countries whose agencies issued warnings
- Singapore
- was one of the countries whose agencies issued warnings
How the source tells it
The article was mostly factual and restrained, but the hackers’ messages added a taunting, urgent register through countdown deadlines and threats of escalating demands.
- urgency the demand was tied to a 24-hour escalation deadline and an explicit clock-down device
- menace the notice used insults and threats to pressure the target