Google has issued a warning about an ongoing wave of extortion emails being sent to executives at numerous companies. The messages claim that the senders have stolen sensitive data from Oracle business applications. According to Google, the group is posing as members of the well-known Cl0p ransomware gang.
However, the company emphasizes that there is currently insufficient evidence to confirm the authenticity of these claims. Google describes the campaign as “extensive” but has not disclosed specific numbers or further details. Requests for comment sent to Cl0p and Oracle regarding the incidents have so far gone unanswered.
Caution and prevention recommended
Security experts advise companies to exercise particular caution when dealing with unexpected emails from supposedly known groups. Organizations should review their security protocols for Oracle applications as well as internal communication channels. Suspicious messages should not be opened or responded to in order to minimize the risk of a successful attack.
Companies are encouraged to verify any claims through official channels and report suspicious activity to their IT security teams immediately. Maintaining robust email security measures and employee awareness training remains critical in defending against such extortion attempts.