ShinyHunters claims takeover of cl0p website — Daily Maverick
In South Africa, Daily Maverick reported that the ShinyHunters group claimed to have hacked the dark web site of its rivals from cl0p. According to ShinyHunters, on Friday it discovered a vulnerability in cl0p's software and gained broad control over the group's infrastructure.
In communications with Reuters, ShinyHunters representatives said they effectively control their rivals. Cl0p did not respond to Reuters' repeated requests for comment. When Reuters tried to open cl0p's website on Sunday, it was unavailable. According to a screenshot preserved by the eCrime.ch platform, the site displayed a message on Saturday stating that ShinyHunters had taken over the domain.
Dispute over Oracle
ShinyHunters claims that the conflict with cl0p began over the alleged theft last year of an exploit that used a previously unknown vulnerability in Oracle E-Business Suite. Such vulnerabilities are called zero-day vulnerabilities because cybersecurity specialists have zero days to fix them.
More current news is available on the UA.News Telegram channel Telegram.
According to an assessment by a Google analyst, the Russian-speaking cybercriminal group cl0p used this vulnerability to steal data from more than 100 companies. ShinyHunters told Reuters that it was the first to discover the vulnerability. According to ShinyHunters' version, cl0p threatened to reveal the identities of several group members, while ShinyHunters in response threatened to disclose internal details of its rivals' operations. Reuters was unable to immediately verify the accuracy of this version of the conflict.
Experts' assessments
Two cybersecurity experts told Reuters that the confrontation between the groups appears to be genuine. Brandon Parsons, threat intelligence manager at Ascent Solutions, noted that conflicts between cybercriminals on the dark web do occur. Joe Rousen, senior director of security research at SpyCloud, said he had not previously seen such an open confrontation between two cybercriminal groups.
In 2023, cl0p exploited a flaw in the MOVEit file transfer program to steal the data of tens of millions of people at more than 600 companies. This month, Anthropic said it had identified hackers linked to ShinyHunters who were trying to use its tools.
