CVE Tools
Track your stack

Группировка ShinyHunters взломала сайт хак-группы Clop

Хакер (xakep.ru)By Мария Нефёдова

IncidentGrav CMSShinyHunters

Our summary

ShinyHunters claims it breached and defaced the Tor leak site operated by the Clop (Cl0p) ransomware group, using an unauthenticated file-upload flaw in Grav CMS. The group says it obtained source code, server logs and onion-service private keys, which could expose operational data and let it recreate Clop's onion address; it plans to extort Clop following a dispute tied to Clop's exploitation of CVE-2025-61882 against Oracle E-Business Suite.

Read at Хакер (xakep.ru)

Хакер (xakep.ru) publishes this story on its own site; we link to it rather than reprint it.

  1. Dark ReadingShinyHunters Hacked Clop. Now What About Clop's Victims?CVE-2025-61882
  2. BleepingComputerShinyHunters hacks Clop leak site, threatens to extort ransomware gangCVE-2025-61882
  3. SecurityWeekEstée Lauder Discloses Impact From Oracle EBS Zero-Day HackCVE-2025-61882
  4. Help Net SecurityEstée Lauder discloses data breach tied to Oracle EBS vulnerabilityCVE-2025-61882
  5. BleepingComputerEstée Lauder discloses data breach via Oracle E-Business flawCVE-2025-61882
  6. BleepingComputerOver 900 Oracle E-Business instances exposed to ongoing attacksCVE-2025-61882
  7. Help Net SecurityOracle E-Business Suite Payments flaw under attack (CVE-2026-46817)CVE-2025-61882
  8. The Hacker NewsOracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the WildCVE-2025-61882
  9. BleepingComputerHackers now exploit critical Oracle E-Business flaw in attacksCVE-2025-61882
  10. Check Point ResearchThe State of Ransomware – Q1 2026CVE-2025-61882

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store