ShinyHunters hacked Clop’s leak site and threatened to extort the ransomware group
ShinyHunters claimed to access Clop’s Tor data-leak site, exploit an alleged unauthenticated file-upload vulnerability in Grav CMS, and alter the site. BleepingComputer confirmed the uploaded file and defacement, but did not independently verify claims that server data, logs, source code, or Tor private keys were stolen.
CERT24