Archive · 3 Oct 2025
Oracle Investigates Cl0p-Linked Extortion Campaign on E-Business Suite
Some bad guys, called Cl0p, are trying to get money from companies that use Oracle's E-Business Suite software.
They're doing this by hacking into the software, stealing important information, and then asking for huge sums of money.
Oracle, the company that makes the software, says these hackers are using known weaknesses in their software.
Oracle already told its customers how to fix these problems, but some companies didn't.
Now, the hackers are sending emails demanding money, sometimes as much as $50 million.
Oracle is investigating to help its customers.
It’s a reminder that keeping software up to date is very important.
Oracle is investigating an extortion campaign targeting its E-Business Suite users.
Hackers claim affiliation with the Cl0p ransomware group.
The attackers exploited known software flaws for which Oracle released patches in July.
Some victims received extortion emails demanding up to $50 million.
The US CISA describes Cl0p as a major distributor of phishing and malspam worldwide.
- Who
- Oracle and its E-Business Suite customers
- What
- An extortion campaign targeting Oracle's E-Business Suite users.
- When
- The campaign began around September 29th.
- Where
- Worldwide, targeting users of Oracle's E-Business Suite.
- Why
- To extort money from organizations by threatening to release stolen data.
- Company Investigating
- Oracle
- Targeted Software
- E-Business Suite
- Reported Extortion Demand
- Up to $50 million
- Claimed Attackers
- Cl0p ransomware group
- Exploited Vulnerabilities
- Known flaws patched in July
- Organizations compromised (estimated)
- 3,000 in US; 8,000 globally