[CLSTR]
< Back to all clusters
[TECHNOLOGY] · 3 sources

started · updated

Part of situation: ShinyHunters cybercriminal group activities (2 clusters)

ShinyHunters and Clop cybercriminal groups engage in public feud

cybercriminal feud ShinyHunters Clop ransomware data breach cybersecurity risk

A public conflict between prominent cybercriminal groups ShinyHunters and Clop has escalated, raising concerns for global security teams. The feud intensified on September 19, 2026, when ShinyHunters defaced Clop’s leak site by exploiting an unauthenticated file upload flaw in the Grav content management system.

The dispute reportedly stems from a disagreement over a server-side request forgery vulnerability. ShinyHunters claims the exploit was originally theirs and was subsequently used by Clop in attacks against Oracle’s E-Business Suite.

In a separate development related to these actors, ShinyHunters has claimed to have breached FBI systems, alleging they possess data on all FBI employees.

Entities

FBI · Flashpoint

Sources

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw [cybernoz.com]
The hunters go after the bureau. [thecyberwire.com]
ShinyHunters vs. Clop: Unfolding Cybercriminal Feud Raises Risk for Security Teams Worldwide [www.businesstechweekly.com]