ShinyHunters, a well-known extortion gang, has breached the data leak site operated by the Clop ransomware group. The attackers defaced the Tor site and claim to have accessed server data as well as the private keys for its onion service, according to BleepingComputer.
By seizing those credentials, ShinyHunters could potentially disrupt Clop's ability to operate its leak site or impersonate the gang's infrastructure. The move is notable because it shows criminal groups increasingly targeting each other's operations, not just conventional victims.
BleepingComputer reports that ShinyHunters is now threatening to extort the ransomware gang. The full extent of the stolen data and Clop's response remain unclear, but the breach highlights how fragile even ransomware operations' own security can be.