Cybercriminal group ShinyHunters claimed to have breached rival gang cl0p's dark-web infrastructure by exploiting a software vulnerability, seizing control of much of their systems. The conflict reportedly originated over a valuable Oracle zero-day exploit, with both groups accusing each other of stealing tools and threatening to expose identities.
ShinyHunters compromised and defaced Clop's dark web leak site, replacing content with ShinyHunters branding. The group claims to have obtained Clop's source code, server logs, and onion service private keys for extortion purposes, though these deeper access claims remain unverified.