The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability.
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
About this summary. This is a short, independently written summary of an article first published by BleepingComputer. Cyber Security News did not report or verify the underlying story. Read the original: https://www.bleepingcomputer.com/news/security/shinyhunters-hacked-clop-leak-site-using-grav-cms-path-traversal-flaw/
Source attribution: headline and facts are from BleepingComputer (bleepingcomputer.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Storm-3168: Agentic-driven cloud attacks using compromised service principals
Attack overview Technical analysis Mitigation and protection guidance References Learn More Microsoft Security Research has identified malicious cloud activity…
🏴☠️ Vexy ransomware has just published a new victim : Majani Insurance Brokers
Majani Insurance Brokers is an independent insurance broker serving both businesses and individuals. It arranges insurance products across areas including general…
Dark Web Profile: Blue Locker Ransomware
Threat Actor Profile: Blue Locker Ransomware Blue Locker Ransomware, first detected in late 2021, the group stayed low-profile for years before making global headlines…
Data Breaches Announced by MedImpact Healthcare Systems; Rosch Visionary Systems
Notification letters are being mailed to individuals affected by data breaches at the pharmacy benefit management service provider MedImpact Healthcare Systems and the…
Using Threat Intelligence to Stop Ransomware Attacks
Ransomware does not start when files are encrypted. By then, an attacker may already have obtained valid credentials, entered the network, moved between systems and…
Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison
Ryuk member Karen Vardanyan was sentenced to 24 months in U.S. prison after extradition from Ukraine and ordered to pay $1.2M in restitution. Karen Vardanyan, a…