As cited
Copy frozen at (site build).
ransomware
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
The Clop ransomware group's data leak site was compromised and defaced by ShinyHunters through an unauthenticated path traversal vulnerability in unpatched Grav CMS software. Clop relocated its leak site to a new Tor address following the intrusion. The vulnerability allowed unauthorized access to the server without requiring credentials.
Why it matters: Ransomware operators and threat actors rely on leak sites to maintain victim pressure and credibility; compromise of Clop's infrastructure demonstrates that even criminal operations face security gaps, and organizations should monitor for indicators that their data may have appeared on successor sites or dark web forums.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
ransomware
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
The Clop ransomware group's data leak site was compromised and defaced by ShinyHunters through an unauthenticated path traversal vulnerability in unpatched Grav CMS software. Clop relocated its leak site to a new Tor address following the intrusion. The vulnerability allowed unauthorized access to the server without requiring credentials.
Why it matters: Ransomware operators and threat actors rely on leak sites to maintain victim pressure and credibility; compromise of Clop's infrastructure demonstrates that even criminal operations face security gaps, and organizations should monitor for indicators that their data may have appeared on successor sites or dark web forums.
- Source published
- First seen by Cybersecurity Tracker