ShinyHunters hijacks Cl0p's leak site and demands an eight-figure payment
The group is threatening to expose Cl0p's payment records, including the companies that paid and the Bitcoin addresses used.
By Ryan Merket · Published
Primary source: Recorded Future News
Why it matters
The hijack exposes the fragility of criminal leak-site infrastructure, while the threatened release of payment records creates a second breach risk for Cl0p victims.
ShinyHunters hijacked Cl0p's Tor-based leak site over the weekend and repurposed the ransomware gang's publishing infrastructure for an extortion demand against Cl0p itself, according to Recorded Future News.
The site, which Cl0p has used to identify victims and pressure them into paying, displayed a banner saying the domain had been seized by ShinyHunters. The rival group demanded an unspecified eight-figure payment, threatened to increase the price every 24 hours and later added a public apology to its terms.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.