High-Level Mafia War: Trillions of Rupiah at Stake

An unusual incident has occurred on the website managed by the Cl0p ransomware group. The site was reportedly taken over by a rival hacking group, ShinyHunters, who are now demanding a ransom worth trillions of rupiah to restore the site.

This situation is considered unique, given that the Cl0p website is typically used specifically to publish the results of their data breaches—including lists of victims—and serves as a platform for victims to pay the demanded extortion money. However, the tables have turned, and the Cl0p group itself is now facing the same predicament.

ShinyHunters has altered the website’s interface, displaying a notice stating that Cl0p’s domain has been seized. While ShinyHunters has not specified the exact total ransom amount, they stated that the demand is in the eight-figure range in US dollars. This figure represents 2,333% of Cl0p’s net worth, indicating the possession of assets valued at hundreds of millions of dollars.

“I hope you can pay that amount because that is the demand, and it is negotiable. Gather your bosses in front of the whiteboard in the command room. Time is running out, fool. Apologies for our unprofessionalism,” wrote the announcement in the message.

ShinyHuters also revealed that the ransom amount will continue to increase over a 24-hour period if the Cl0p group fails to provide any immediate response. Last Monday, the ransom value was reported to have increased, accompanied by a public apology from the Cl0p side.

Furthermore, a message posted the previous day leaked the identities of three individuals claimed to be the primary operators behind the Cl0p group. These three names have reportedly been included in public reports.

The message also urged the handover of data obtained from targets using Oracle E-Business software, a popular business platform. Following this cyberattack, several authorities—ranging from Oracle itself to the US Federal Bureau of Investigation (FBI), as well as national cybersecurity agencies in the UK and Singapore—responded immediately by issuing stern warnings.