ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

ShinyHunters exploited an unauthenticated Grav CMS file upload to upload a message and later fully deface the Clop (Cl0p) ransomware group's Tor leak site; they claim to have stolen server data, system logs, source code, Grav plugins, and the Tor onion private keys, enabling them to host the same onion address and attempt to extort Clop, while BleepingComputer has independently confirmed the defacement but not all theft claims.