ShinyHunters Claims to Have Seized Rival Cybercrime Group cl0p’s Dark Web Site

A feud between two notorious cybercrime groups has escalated after ShinyHunters claimed it hacked and took control of the dark web website operated by rival group cl0p.

ShinyHunters, a digital extortion gang known for large-scale data theft campaigns, told Reuters that it breached cl0p’s website on Friday after discovering a vulnerability in the group’s software.

The group claimed it had gained extensive control over cl0p’s infrastructure, saying, “We basically own them now.”

Cl0p’s dark web website was inaccessible when Reuters attempted to visit it on Sunday. A screenshot preserved by the cybersecurity research platform eCrime.ch showed that the site had displayed the message, “Domain Seized By ShinyHunters.”

Two cybersecurity experts who spoke to Reuters said the confrontation appeared to be genuine. However, Reuters said it could not independently verify all of ShinyHunters’ claims, while cl0p had not publicly responded to requests for comment.

The dispute reportedly dates back to last year, when the two groups clashed over an alleged zero-day vulnerability in Oracle’s E-Business Suite software. ShinyHunters claimed it had discovered the vulnerability first, while cl0p allegedly used it to steal data from more than 100 organisations.

According to ShinyHunters, tensions intensified after cl0p threatened to expose the identities of some of its members. ShinyHunters then allegedly threatened to reveal details about cl0p’s internal operations.

Cl0p is considered one of the most active cybercrime groups, having previously exploited vulnerabilities in enterprise software. In 2023, the group exploited a vulnerability in MOVEit file-transfer software, resulting in data breaches affecting more than 600 companies and tens of millions of people.

ShinyHunters has also been linked to several major cyber incidents, including alleged theft of millions of records from video game company Rockstar Games and a cyberattack involving the education platform Canvas that disrupted schools across the United States.

The latest incident highlights an unusual development in the cybercrime world, with rival hacking groups openly targeting each other rather than focusing solely on businesses, governments and other victims.

• Tweet
• Share
• Share
• Share
• Share