Threat Actor
Cl0p
- First Reported
- Mar 23, 2021
- Latest Reported
- Oct 28, 2026
Reported Context (77)
- Identified as an alias of Hazy Scorpius, named among cybercriminals who forgo ransomware to conduct data theft and extortion. Retailers Warned of Cyber Threats Ahead of 2026 Peak Shopping Season
- The article says the Cl0p ransomware and extortion crew leveraged CVE-2025-61882. Oracle E-Business Suite RCE Flaw Sees Reported Probing After Patch
- The article reports that the Cl0p ransomware and extortion group exploited zero-day bugs in Oracle enterprise management software last year to access stored data. Defused Reports Probing of Patched Oracle EBS Vulnerability
- Named among threat groups adopting data-theft extortion without encryption. Red Canary’s 2026 Threat Detection Report Highlights Surge in Identity Threat Detections
- Closed ransomware group known for systematically exploiting zero-day vulnerabilities; resurfaced in February 2025. Europol IOCTA 2026 Warns AI and Anonymised Infrastructure Are Scaling Cybercrime
CVE (179)
Malware (188)
People (77)
Threat Actors (299)
MITRE ATT&CK (118)
Vendors (118)
Products (295)
Tools (111)
Industries (117)
Countries (62)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.