logo

Here is the email Clop attackers sent to Oracle customers

ID: 870bd57b-72ba-5796-b34e-07db3b900655

STIX ID: report--870bd57b-72ba-5796-b34e-07db3b900655

Feed Name: CyberScoop

Threat Score
72/100

Date Published: 2025-10-02

Date Updated: 2026-04-21

Author: Matt Kapko

...
...

Extortion emails from the Clop (CL0P) group targeted Oracle E-Business Suite customers claiming to have stolen data and offering to show three sample files as proof; emails were sent from hundreds of compromised third-party accounts. Oracle acknowledged customers received the emails and said its investigation points to possible exploitation of vulnerabilities fixed in the July 2025 critical patch update, but independent verification of a breach or data theft has not been confirmed.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.