A dispute between two notorious hacking groups has highlighted the growing risks surrounding cybercrime infrastructure.

WASHINGTON — September 21, 2026 — A new dispute between two major cybercrime groups has drawn attention to the security of underground online infrastructure, after ShinyHunters claimed it hijacked the dark-web website used by rival group Cl0p.

According to Reuters, ShinyHunters said it exploited a vulnerability in Cl0p's software on Friday and gained control of the group's online infrastructure. Cl0p's website subsequently went offline and reportedly displayed a message claiming the site had been seized.

The incident is linked to a longer dispute involving a zero-day vulnerability in Oracle's E-Business Suite. Cl0p has previously been associated with major cyberattacks, including the 2023 MOVEit breach that affected hundreds of organizations.

Cybersecurity researchers say direct attacks between cybercrime groups are unusual. The latest incident demonstrates that criminal hacking networks can also become targets of sophisticated attacks, creating another layer of risk for the broader cybersecurity ecosystem.

The development comes as businesses and governments continue to strengthen defenses against ransomware, software vulnerabilities and attacks targeting digital infrastructure.