Something’s off.A report says ShinyHunters broke into and defaced the data-leak site operated by the Clop ransomware group, then allegedly demanded payment from Clop. The reported entry point was an unpatched Grav CMS installation: a path-traversal flaw could reportedly let an unauthenticated user steer an upload outside its intended temporary directory.
The odd reversal is that a group that uses a leak site to pressure others was reportedly pressured through that same kind of site. Clop acknowledged that its Grav installation had not been fully updated, but disputed that valuable operational or financial data had been taken. Grav reportedly said the flaw was legitimate, affected the older 1.7 branch, and was later backported there.
UNVERIFIED
Feed metadata identifies a report, not independently verified underlying facts.
This is a source-attributed report; the underlying incident has not been independently verified here.
