ShinyHunters Claims to Have Hacked Clop Ransomware Gang's Dark Web Leak Site

Hacking group ShinyHunters claims to have breached Clop ransomware gang's Tor-based leak site by exploiting an unauthenticated file upload vulnerability in Grav CMS. BleepingComputer confirmed two visible signs of the attack: a malicious text file and a defaced page bearing the ShinyHunters logo, both accessible on Clop's existing onion address. The attackers further claim to have stolen source code, server logs, and the Tor onion service private key, though these assertions remain independently unverified. ShinyHunters issued a 72-hour ultimatum to Clop, signalling an intent to extort the ransomware group using the allegedly stolen data. Whether the defacement was served from Clop's original server or a separate server using stolen private keys has not been confirmed.