Cl0p-Linked Gang Attempts to Extort Oracle E-Business Customers

**Extortion campaign targeting Oracle E‑Business Suite users:** Multiple organizations have received high-volume extortion emails claiming stolen EBS data and using email addresses linked to Cl0p; Mandiant and Google GTIG are investigating but have not yet substantiated data theft, while Oracle points to possible exploitation of vulnerabilities fixed in the July 2025 Critical Patch Update.