Increased Risk of Takedown Clearnet domains, being accessible through the standard internet, are more vulnerable to takedown efforts compared to hidden services on the Tor network. Consequently, Clop’s clearnet websites face a higher risk of removal, although it remains unclear whether enforcement agencies or hosting providers are responsible for these actions. Additionally, cybersecurity firms may have launched their own distributed denial-of-service (DDoS) attacks to protect the victims.
Potential Lucrative Gains for the Ransomware Group According to Coveware, only a small fraction of Clop’s estimated 1,000 direct targets are likely to pay or have already paid the demanded ransoms. Nevertheless, the Russian ransomware group could still amass a staggering $75-100 million from the demands associated with the MOVEit breach alone.
