At a Glance
ShinyHunters says it seized control of cl0p’s dark web site.
The groups have been feuding over an Oracle E-Business Suite zero-day exploit.
Cybersecurity experts say the clash appears genuine and unusually public.
cl0p has yet to publicly respond.
A fight between two major cybercrime groups has spilled into the open, raising fresh questions about their access to sensitive hacking infrastructure.
Cybercrime rivals are taking their fight directly to each other. ShinyHunters said it hacked cl0p’s dark web site after exploiting a vulnerability in the gang’s software, briefly replacing the site with a message declaring it had been seized.
Key Details
ShinyHunters said the attack happened Friday and gave it broad control over cl0p’s infrastructure. The site was unreachable when Reuters checked Sunday, while a screenshot showed the message, “Domain Seized By ShinyHunters.”
The feud reportedly centers on an Oracle E-Business Suite zero-day that cl0p allegedly used to steal data from more than 100 companies. ShinyHunters claims it discovered the flaw first. Reuters could not independently verify that account.
Why It Matters
Cl0p exploited a MOVEit vulnerability in 2023, affecting more than 600 companies. Last month, it claimed data theft from nearly 50 companies, including Philips, Shell, Fiserv and GE. ShinyHunters has also claimed major breaches involving Rockstar Games and Canvas.
The next focus will be whether cl0p responds and whether the dispute exposes further details about either group's operations.
Every headline is an opportunity — don't watch it from the sidelines. Trade it live on TradeQuo.
Source: Reuters
Time: 3:30 PM EEST
