Hackers Hack Hackers: Shinyhunters Hijacks Clop's Leak Page on the Darknet

TVS News AI, editorially supervised, presents Hackers Hack Hackers: Shinyhunters Hijacks Clop's Leak Page on the Darknet.

When two of the most notorious cybercrime groups collide, there are consequences – for their victims too. That's exactly what's happening right now on the darknet: According to Golem.de, the group Shinyhunters has hijacked the data leak page of the notorious ransomware group Clop and is threatening to publish leaks about ransom payments.

What this means for Clop victims: Anyone who was extorted in the past and paid ransom could now come under pressure a second time. Shinyhunters has announced it will disclose internal information about the sums paid – additional reputational damage that makes affected companies vulnerable to extortion once again.

The incident also shows: cybercrime gangs don't just target companies and security agencies – they also repeatedly clash with each other. The attack on Clop's leak portal reads like a targeted declaration of war – one gang hijacking the other gang's intimidation stage.

What's known so far

Golem.de's key statement on the incident:

Victims of the hacker group Clop could come under renewed pressure. Shinyhunters has hijacked the data leak page and is threatening to leak information about ransom payments.

The fact that Shinyhunters has taken over Clop's leak portal of all things – precisely the place where Clop normally publishes stolen data to pressure victims – is interpreted by Golem.de as a direct attack on a competitor within the same ecosystem.

What remains open

Whether Shinyhunters will actually follow through on the threat and what data will be published in detail is not yet clear. What is clear: the darknet feud doesn't stay in the darknet. It has real consequences for everyone who has ever been affected by Clop – and for the security teams handling such incidents.