Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
ReliaQuest has uncovered a sophisticated JavaServer Pages (JSP) web shell deployed by the Clop ransomware group following the exploitation of CVE-2026-12569, a…
Tag: LEMURLOOT
LEMURLOOT Web Shell Used by Clop
LEMURLOOT is a web shell used by Clop in MOVEit Transfer attacks, enabling credential theft and data exfiltration.