ShinyHunters Hacks and Defaces Clop Ransomware Leak Site
The ShinyHunters extortion group has hacked and defaced the dark web leak site operated by the Clop ransomware gang, replacing the site’s content with its own branding and a message directed at visitors.
UPDATE, September 21, 2026: ShinyHunters has escalated its dispute with Clop, demanding an eight-figure payment, threatening to disclose information about companies that allegedly paid Clop during its Oracle E-Business Suite campaign, and adding a demand for a public apology. ShinyHunters also told Hackread.com that the temporary outage affecting its own onion site was caused by unrelated network issues.
Hackread.com observed the defacement on Clop’s Tor site on September 19, 2026. The page displayed ASCII artwork associated with ShinyHunters, a link directing visitors to the group’s own site, and the message “rooting your systems since ’19 ;).”
Clop, also written as Cl0p, operates a Tor-based leak site used to name organizations targeted in its data theft and...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
