Emerging Threats: The Latest from Google Mandiant

On October 2, 2025, Google Mandiant’s Threat Intelligence Group (GTIG) sounded the alarm on a sharp rise in cyber activities that could be linked to the notorious Cl0p ransomware gang. These activities seem to involve extortion attempts, with emails claiming access to sensitive data snatched from various firms’ Oracle E-Business Suite systems.

According to Genevieve Stark, a key figure in GTIG, this campaign kicked off around the end of September 2025. While early in the investigation phase, Stark and her team are cautious but concerned, as these incidents mirror typical Cl0p attack patterns. Charles Carmakal, Mandiant’s CTO, describes an orchestrated email blitz using compromised accounts, hinting at deeper connections with well-known cybercrime groups like FIN11 and TA505.

Linking to Larger Cybercrime Patterns

The emails in question reportedly contain details verified on the Cl0p leak site, fabricating a strong case for Cl0p’s involvement. However, the exact methods of data acquisition are still under wraps. Possibilities include exploiting default password resets on Oracle’s platform.

Oracle, aware of these threats, stresses the importance of applying their latest security patches. Despite uncertainty over which vulnerabilities may be targeted, their July 2025 update addresses some known issues. Cl0p’s disreputable history spans breaches using zero-day vulnerabilities across several major platforms, influencing numerous global entities. Meanwhile, both Oracle and Google are taking steps to assess and mitigate these cyber risks effectively.

As these threats evolve, stay informed and protected by following our cybersecurity updates. Discover more about safeguarding your systems from emerging threats.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.