Clop Ransomware Targets Oracle E-Business Suite: Extortion Threats Rise
Oracle Investigating Extortion Threats
Oracle is in the spotlight as it looks into extortion emails that have been bombarding its E-Business Suite clients since last month. These intimidating messages appear linked to security issues that Oracle had addressed in a critical patch back in July 2025.
The alleged perpetrators, reportedly associated with the infamous Clop ransomware group, are claiming to possess sensitive data from firms using Oracle’s technology. Rob Duhart, Oracle’s chief security officer, stated the involvement of flaws disclosed earlier this year.
He advises Oracle users to thoroughly review the July patch update to safeguard against potential breaches. Furthermore, a warning from the Google Threat Intelligence Group has highlighted that this situation involves FIN11, a group well-known for its affinity to Clop. Despite the threats, there’s currently no confirmed data theft.
Spear-Phishing Attacks on the Rise
Contact details in these emails, identical to those from past Clop-related demands, infer serious intent. Known for targeting software vulnerabilities, Clop has been implicated in numerous cyber racks, with Kroll monitoring these developments under the name KTA080.
Max Henderson from Kroll mentions that spear-phishing emails targeting Oracle users align eerily with previous Clop campaigns. He stresses that recipients should not dismiss these threats lightly.
Experts are urging businesses to stay alert, encouraging a system audit to ensure data hasn’t been compromised. Staying a step ahead could prevent significant damage.
For Cybersecurity Professionals: Keep informed on breaking news, trends, and in-depth analyses by subscribing to our newsletter. Your email subscription is key to staying updated.
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more

