CL0P Ransomware Group Targets Gladinet CentreStack in New Campaign

CL0P appears to be staging an extortion campaign against internet-facing Gladinet CentreStack file servers, potentially exploiting recently disclosed CentreStack vulnerabilities (including CVE-2025-11371, CVE-2025-30406, CVE-2025-14611). Curated Intelligence and Huntress reporting, plus observed port-scan data and CL0P’s history of large-scale file-transfer exploits (Oracle EBS, MOVEit, Cleo, etc.), indicate credible preparation for coordinated data leak publications, though no victim samples or deadlines have been posted yet.