Clop Strikes Again: Ransomware Group Targets Gladinet CentreStack in Global Extortion Spree
The Clop ransomware group is at it again, targeting Gladinet CentreStack file servers in a large-scale extortion campaign. Over 200 servers are at risk, thanks to an unknown CVE. Clop’s motto? “Why rob a bank when you can hack one?” Stay vigilant, unless you enjoy surprise data leaks.
Hot Take:
Looks like the CLOP gang took a page out of Santa’s book and decided that Gladinet CentreStack servers have been extra naughty this year. Instead of coal, though, they’re dishing out a healthy dose of ransomware terror. When your file server dreams are shattered by a cybercriminal group, who knew the biggest threat to your cloud storage was lurking on the naughty list?
Key Points:
- CLOP ransomware group is targeting Gladinet CentreStack file servers in a large-scale extortion campaign.
- Over 200 IPs with the “CentreStack – Login” HTTP title are potential targets due to an unknown CVE.
- The ransomware group exploits vulnerabilities in file transfer servers, including Oracle EBS and MOVEit.
- Clop is known for double-extortion tactics, stealing data and publishing it on dark web data leak sites.
- Gladinet and Huntress have suggested a temporary workaround for the CVE-2025-11371 vulnerability.
Already a member? Log in here