Cybercrime feud erupts on dark web as notorious group claims hijack of rival's website
The group also claims access to Cl0p source code and Tor keys and set a 72-hour deadline for payment.
- On Friday, the cybercrime group ShinyHunters hijacked the dark web site of rival gang Cl0p, exploiting a software vulnerability to establish control over the group's infrastructure.
- The confrontation stems from a long-simmering feud over the alleged theft last year of a software exploit targeting a then-unknown flaw in Oracle's E-Business Suite .
- Cl0p, a Russian-speaking gang, previously used the EBS vulnerability to steal data from more than 100 companies according to Google analysts, while ShinyHunters threatened to expose Cl0p's internal workings.
- Joe Roosen, security research director at Texas-based SpyCloud, described the public clash as rare, saying, "This was a twist for sure," as rival gangs fought openly.
- Beyond the current feud, ShinyHunters was recently linked to hacking attempts on Anthropic's tools, while Cl0p previously compromised data from more than 600 companies using the MOVEit software bug.
23 Articles
23 Articles
Cybercrime feud erupts on dark web as notorious group claims hijack of rival's website
One of the world's best-known cybercrime groups said on Sunday it had hijacked one of its chief rivals' dark web site, bringing what it said was a long-simmering feud out into the open.
Two of the world's most notorious hacker groups have gone toe-to-toe with each other. One took over the other's website over the weekend after finding a security hole.
ShinyHunters says it hijacked Cl0p’s dark web leak site
On the night of Friday, September 18, the Tor leak site that the Cl0p ransomware gang used to name and pressure its victims was defaced. Another criminal group claimed responsibility, according to BleepingComputer. When people visited the site, they saw Pokémon artwork, an ASCII Umbreon, above the message “THIS SITE HAS BEEN PWN3D BY SHINYHUNTERS” […] This story continues at The Next Web
Open war in the underground of ransomware: ShinyHunters exploits a breach in Grav CMS to violate and scare the data leak site of Clop, claiming theft of source code, log and private keys of the Tor service, and threatening the extortion of the rival gang. The article ShinyHunters holes the leak site of Clop and threatens to extort extortioners comes from (in) digital security.
The Tor site used by Cl0p to display and press its victims was intervened with an image of Umbreon and a message from ShinyHunters. The group claims to have obtained code, records and private keys, but so far only the defacement and uploading of a file has been confirmed.
Coverage Details
Bias Distribution
- 42% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
