The Cl0p cybercriminal group is currently facing a serious threat after their website, used for extortion campaigns and accessible through the Tor browser, was hacked. The attackers, a group known as Shinyhunters, defaced the site and left a message directed at Cl0p members, demanding they pay up and hand over data. The message read: "Dear Likhogray and Tarasov, tell your boss j0nny to wake up, damn it, threaten these individuals. Hand over the goods and pay up." This attack is believed to be in response to the money Cl0p has extorted during recent cyberattacks. Cl0p gained notoriety earlier this year when they exploited vulnerabilities in Oracle E-Business Suite (EBS) systems, allowing them to access sensitive data and accumulate substantial funds. This has drawn the attention of other cybercriminals, including Shinyhunters, who are now targeting Cl0p for their ill-gotten gains. The French cybersecurity agency ANSSI has been monitoring Cl0p for several years, recognizing them as a particularly dangerous group. Their attacks, such as the infamous breach of the MOVEit software in 2023, caused widespread damage, including among French companies. Shinyhunters have given Cl0p just under three days to comply with their demands. According to Bleeping Computer, the group claims they have achieved "full access" to Cl0p’s server, possibly including source code and system logs. These files might contain IP addresses of users who connected to the server, offering valuable insights into the operations of cybercriminals. Such leaks can help researchers and law enforcement better understand the structure and methods of cybercriminal networks. This situation echoes past incidents, such as the "Conti Leaks" in 2022, where internal messages from the Conti group were exposed following the Russian invasion of Ukraine, leading to the group’s downfall. A similar fate may now be looming over Cl0p, which would be a major victory for investigators tracking them. As the days pass, the cybercriminal landscape may witness another dramatic shift, with Shinyhunters potentially holding the keys to Cl0p’s operations.