Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
ReliaQuest has uncovered a sophisticated JavaServer Pages (JSP) web shell deployed by the Clop ransomware group following the exploitation of CVE-2026-12569, a…
Tag: DEFUSED
Cl0p Affiliates Exploit PTC Windchill and FlexPLM Flaws in Data Extortion Campaign
Threat actors linked to the Cl0p ransomware group are actively exploiting vulnerabilities in internet-exposed PTC Windchill and FlexPLM deployments as part of…
Defused Assists in Clop Web Shell Analysis
Defused, a security research group, helped identify the Clop-linked web shell activity.