logo

ShinyHunters hacks rival extortion gang and takes over its dark web site

ID: 813b47c6-c4f9-52f3-85d1-ca858c429a19

STIX ID: report--813b47c6-c4f9-52f3-85d1-ca858c429a19

Feed Name: Malwarebytes Blog

Threat Score
70/100

Date Published: 2026-09-21

Date Updated: 2026-09-22

...
...

ShinyHunters reportedly exploited an unauthenticated file-upload flaw in Grav CMS to deface and take control of Clop's dark web leak site, claiming possession of the site's onion private keys and escalating extortion threats; the article places this incident in the context of large-scale data theft and ransomware campaigns attributed to Clop and prior data exfiltration by ShinyHunters.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.