Archive — US — techcrunch
Clop hackers caught exploiting Oracle zero-day bug to steal executives’ personaldata
Clop hackers exploited a zero-day vulnerability (CVE-2025-61882) in Oracle's E-Business Suite to steal personal data from corporate executives. Oracle issued a patch urging users to update immediately, revealing that the hackers initiated an extortion campaign after previously identified vulnerabilities had been addressed.
Key points
- Oracle fixed a zero-day vulnerability (CVE-2025-61882) that allowed hackers to access data without credentials.
- The vulnerability was already being exploited by the Clop hacking group to steal personal information of corporate executives.
- Oracle released a new patch after realizing the ongoing exploitation, contradicting earlier claims of an ending extortion campaign.
- The hacking campaign primarily occurred in August, following previous patches for other vulnerabilities.
- Clop hackers have sent extortion emails to several victims, demanding payment to prevent information leaks.
Why it matters
- The incident highlights ongoing cybersecurity threats, especially in enterprise software.
- Historical patterns show that zero-day vulnerabilities are often targeted by hackers for immediate gain.
- The growing trend of ransomware and extortion attacks against executives has gained momentum in recent years, making it a critical focus for cybersecurity in 2025.
The ongoing exploits by the Clop group reflect significant vulnerabilities within major software platforms, emphasizing the need for robust cybersecurity measures and timely updates in the face of evolving threats.