Clop Ransomware Responds to ShinyHunters Amid Eight-Figure Demands

A public dispute between the Clop ransomware gang and ShinyHunters escalated after ShinyHunters compromised Clop's onion-hosted data leak site, posted extortion demands (including an eight-figure ransom demand and threats to publish payment records), and distributed Salesforce-related data; Clop later regained posting access and requested ShinyHunters make contact. The report notes both groups' histories of large-scale data theft and that the dispute involves alleged exploitation of Oracle E-Business Suite vulnerabilities, but the exact extent of infrastructure control and data exfiltration is unclear.