An unusual conflict has erupted in the world of cybercrime: the ShinyHunters hacking group has claimed to have compromised the infrastructure of its rival, cl0p, by exploiting a software vulnerability. The dispute between the groups arose over the theft of an exploit last year, which exploited an unknown vulnerability in one of Oracle’s systems.
“We basically own them now,” ShinyHunters representatives stated in comment to Reuters following the breach on Friday 18 September.
cl0p did not respond to any of the publication’s numerous requests for comment. On Saturday, a message appeared on the group’s dark web site reading “Domain Seized By ShinyHunters“, and by Sunday it was already inaccessible.
Joe Rousen, senior director of security research at the Texas-based company SpyCloud, told Reuters that he had never seen one cybercriminal group engage so openly in direct confrontation with another.
“It certainly came as a surprise. It is rare I get to see these criminals fight each other.”
ShinyHunters claimed that the conflict arose because their rivals had stolen an exploit last year that targeted a previously unknown vulnerability in Oracle’s E-Business Suite. Using this exploit, the Russian-speaking cybercriminal group cl0p stole data from more than 100 companies.
As the conflict escalated, cl0p allegedly threatened to reveal the identities of several members of the rival group, whilst ShinyHunters responded by promising to disclose details of their internal operations.
Both groups are considered to be among the most active and resourceful cybercriminal groups. In 2023, cl0p exploited a vulnerability in the MOVEit file management programme to steal data from tens of millions of people at over 600 companies, and last month claimed to have stolen large volumes of data from nearly 50 companies worldwide, including Philips, Shell, Fiserv and GE.
In April, ShinyHunters attracted media attention with a claim that millions of corporate records had been stolen from Rockstar Games, and in May – the breach of the Canvas education platform, which caused widespread disruption to schools in the US.
Share:
Click Here For The Original Source.
