Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
ReliaQuest has uncovered a sophisticated JavaServer Pages (JSP) web shell deployed by the Clop ransomware group following the exploitation of CVE-2026-12569, a…
Tag: Ransom-ISAC
Cl0p Affiliates Exploit PTC Windchill and FlexPLM Flaws in Data Extortion Campaign
Threat actors linked to the Cl0p ransomware group are actively exploiting vulnerabilities in internet-exposed PTC Windchill and FlexPLM deployments as part of…
Ransom-ISAC Attributes Web Shell to Clop
Ransom-ISAC, along with eCrime.ch and Defused, attributed the JSP web shell activity to the Clop ransomware group.
U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
A U.S. government entity paid approximately $1 million to prevent the leak of stolen files, according to a case study by Rakesh…