ShinyHunters Hacks Clop Leak Site, Threatens to Extort Ransomware Gang
ID: 63fe41e8-ae22-57b0-ab90-39a6767a6a15
STIX ID: report--63fe41e8-ae22-57b0-ab90-39a6767a6a15
Feed Name: CosmicBytez Labs
Threat Score
ShinyHunters reportedly exploited an unauthenticated file upload vulnerability in the Grav CMS powering Clop's Tor leak site, defaced the site (confirmed by BleepingComputer), and claims to have exfiltrated source code, server logs, and private Tor onion keys—threatening to extort Clop within 72 hours; the most consequential claims (onion keys and logs) remain unverified.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.