Cybercrime civil war brewing? ShinyHunters reportedly hacks Cl0p ransomware gang and threatens further damage

ShinyHunters hacked rival gang Cl0p, stealing source code, logs, and onion service keys The gang defaced Cl0p’s site via Grav CMS flaw, posting their logo and taunts about past threats Feud recalls Conti’s collapse in 2022, raising risk of escalating “cyber war” between criminal groups Infamous cybercriminal gang Cl0p has seemingly been hacked by an even more infamous data leak collective, ShinyHunters.

The attack is still being pieced together, but it would seem we have true hacker beef on our hands - which just might escalate into a full-blown cyber war.

ShinyHunters has added Cl0p to their data leak site, giving the hacking group 72 hours to pay a ransom or see all their files leaked into the cybercriminal underbelly.

The files allegedly stolen in the attack include source code, Grav CMS plugins, system logs, and other information, Cybernews reports.

We don’t know how much money ShinyHunters are asking to keep Cl0p’s files private.

Still downloading "The data we stole includes source codes, gravCMS plugins, and other things.

We are still downloading and reviewing them," ShinyHunters allegedly told BleepingComputer .

The group also said they stole everything in the server’s /var/log directory, including system activity records, authentication logs, and IP addresses associated with connections to the server.

We doubt this could lead to the identification of any Cl0p members, and even if it could, it would mean very little since the members are likely Russian and thus mostly free to conduct their operations.

Doxxing might help defenders disrupt the group’s infrastructure, though.

Whether or not that will be needed, given ShinyHunters’ activity, remains to be seen.

The attackers also said they stole the private keys for Cl0p’s Tor onion service: "We have their onion keys.

So if they kick us out it wouldn't matter at all because we control the private keys to host the same exact onion URL," the group said.

On top of it all, ShinyHunters defaced Cl0p’s website.