ShinyHunters claims hijack of rival cl0p's dark web site
by@Reuters
Summary
On September 20, the cybercrime group ShinyHunters publicly claimed to have hijacked the dark web site of its rival, cl0p, marking a significant escalation in their ongoing feud. This confrontation arose after ShinyHunters discovered a vulnerability in cl0p's software, enabling them to gain extensive control over cl0p’s infrastructure. The conflict highlights a dispute over the discovery of a zero-day exploit in Oracle's E-Business Suite, which both groups claim to have utilized for data theft. Cybersecurity experts confirmed the authenticity of this clash, noting the rarity of such direct confrontations among criminal organizations.
Tokens
$ORCL
Analysis
cl0p: Cl0p is a Russian-speaking cybercrime gang recognized for its skill in identifying and exploiting vulnerabilities in enterprise software. It is the target of the alleged hijack by ShinyHunters in this ongoing feud stemming from a disputed Oracle E-Business Suite zero-day exploit. The group has carried out multiple large-scale data theft operations against companies worldwide. Oracle: Oracle develops enterprise software products including the E-Business Suite referenced in the cybercrime dispute. Its software was the subject of the contested zero-day exploit claimed by both ShinyHunters and cl0p. The company is cited in connection with the vulnerability used for unauthorized network access. Joe Roosen: Joe Roosen is the senior director of security research at Texas-based SpyCloud. He described the open takeover attempt as an unusual twist in cybercrime dynamics. His observations underscore the rarity of one criminal group directly confronting another in this manner. ShinyHunters: ShinyHunters is a digital extortion group known for aggressive data theft campaigns targeting various organizations. In the reported incident, it claims to have hijacked the dark web site of rival cl0p by exploiting a vulnerability in the group's software infrastructure. The group has also been linked to recent attempts to misuse tools from AI company Anthropic. Brandon Parsons: Brandon Parsons is a threat intelligence manager with Minnesota-based Ascent Solutions. He assessed the reported cybercrime clash as appearing genuine and noted that dark web rivalries are a documented occurrence. His input helps contextualize the credibility of such public confrontations between groups. Exploit Dispute: The feud centers on competing claims regarding discovery of a zero-day vulnerability in Oracle's E-Business Suite used for data theft operations. Cybercrime Rivalry: ShinyHunters claims control over cl0p's dark web infrastructure after discovering a software vulnerability, escalating a dispute over an Oracle exploit discovery. Expert Verification: Two independent cybersecurity specialists described the reported clash as credible and highlighted its uncommon public nature among criminal actors.
Categories
tech