ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

ShinyHunters Exploits Grav CMS Flaw to Breach Clop Ransomware Site

ShinyHunters compromised the Clop ransomware leak site using a Grav CMS path traversal flaw, stealing Tor private keys and negotiation logs in a rival extortion attempt.

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability. [...]