ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

The Clop ransomware gang moved its data leak site to a new Tor address after confirming its previous server was compromised via an unauthenticated path traversal vulnerability in Grav CMS. The flaw, exploited by ShinyHunters, allowed the defacement, prompting the group to relocate its operations to a fresh dark web domain.