Archive — US — techcrunch
Hackers are sending extortion emails to executives after claiming Oracle apps’data breach
Hackers linked to the Clop ransomware group have begun sending extortion emails to executives at various large organizations, claiming to have stolen sensitive data from Oracle applications. Google confirms these malicious emails use compromised accounts and contain links to Clop's leak site, pressuring victims to pay large ransoms, including one case where $50 million was demanded.
Key points
- Hackers from the Clop group began targeting executives with extortion emails on September 29.
- These emails are allegedly linked to stolen data from Oracle's E-Business Suite.
- Clop exploits zero-day vulnerabilities, enabling simultaneous attacks on multiple organizations.
- Compromised accounts and misuse of the password-reset function were used to breach Oracle's web-portals.
- One reported ransom demand reached $50 million, highlighting the financial stakes of these attacks.
Why it matters
- The rise of ransomware attacks aligns with the increasing trend of cybercrime noted across various sectors, particularly impacting large corporations.
- The evolution of hacking techniques, including the use of zero-day vulnerabilities, emphasizes the need for advanced cybersecurity measures.
- This incident illustrates the growing importance of corporate cybersecurity as part of overall IT strategy going into 2025.
The ongoing threat from ransomware groups like Clop underlines the critical need for businesses to bolster their cybersecurity defenses as they navigate increasing extortion tactics in the digital landscape.