Hackers Hack Hackers: Two Notorious Cyber Gangs Clash on the Darknet

TVS News AI, editorially supervised, presents Hackers Hack Hackers: Two Notorious Cyber Gangs Clash on the Darknet.

When criminals themselves become targets of hackers, it becomes clear how vulnerable even the shadow economy is. On the darknet, two notorious cyber gangs are currently engaged in an open battle – and in the end, it could primarily be the previous extortion victims who suffer.

According to Golem.de, the hacker group Shinyhunters has hijacked the data leak site of the notorious cybercrime gang Clop. On precisely the platform where Clop normally publishes stolen data, Shinyhunters is now threatening to disclose internal information about ransom payments.

This puts the victims of previous Clop attacks under renewed pressure. Anyone who has paid so far to prevent publication could now potentially face a second data leak.

What does the takeover mean?

Clop traditionally uses the data leak site as leverage: if victims refuse to pay, the threat is publication of stolen data. With the takeover by Shinyhunters, the logic is reversed. Instead of new corporate data, the threats now target internal dealings around ransom payments – precisely what victims wanted to keep secret.

What does this mean for those affected?

Anyone who has paid ransom to Clop in the past could now be exposed a second time. If payments, negotiations, or internal agreements become public, new attack surfaces open up – both for further cybercriminals and for anyone who wants to trade with the leaked data.

What does the dispute mean in the darknet context?

It is unusual for two prominent cybercrime groups to openly fight each other. Usually, such gangs operate in a division of labor or at least with mutual respect for each other's business areas. The current takeover shows that trust and agreements can also break down in the criminal underworld – to the detriment of everyone involved, including the victims.