Clop Hack: ShinyHunters Hijacks Data Leak Site
ID: def46170-19f8-5683-a1ac-e67e7c3bc9f6
STIX ID: report--def46170-19f8-5683-a1ac-e67e7c3bc9f6
Feed Name: SOCRadar Blog
Threat Score
ShinyHunters reportedly exploited an unauthenticated file-upload flaw in the Grav CMS behind Clop’s leak site to deface the site and claim theft of Clop’s source code, server logs, and Tor private keys; the incident is framed as retaliation over a disputed Oracle E-Business Suite exploit (CVE-2025-61882) and raises risks that stolen data or access could change hands and be publicly exposed.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.