Criminals Claim Oracle Breach, Extort Top Executives Globally

Executives at large organisations are facing extortion threats from a cybercriminal group claiming that they stole sensitive data via Oracle’s E-Business Suite applications. The group, asserting ties to the notorious Cl0p, began sending extortion emails on or before September 29, according to Genevieve Stark, head of cybercrime at Google’s Threat Intelligence Group.

These demands arrive via compromised third-party email accounts and allege that internal data was exfiltrated. While the English in the messages is described as “sloppy,” certain details, such as contact info linked to Cl0p’s known channels, lend credence to their claims.

Google says it has no confirmed proof yet of the breach or data theft. The targeted Oracle platform under suspicion runs core operations like finance, supply chain, and CRM in many companies.

Source: business-standard.com