Clop created custom web shell for Windchill data theft attacks
Teaser from the source
A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal files. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputer →More on Windchill
Other advisories
- CVE-2026-77646highPTC Windchill und FlexPLM: Mehrere Schwachstellen
- CVE-2026-77646nonePTC Windchill: Deserialisierung nicht vertrauenswuerdiger Daten
- CVE-2026-77645nonePTC Windchill: Deserialisierung nicht vertrauenswuerdiger Daten
- CVE-2026-77644nonePTC Windchill: fehlende Authentifizierung fuer kritische Funktion
- CVE-2026-77646nonePTC Windchill: Deserialisierung nicht vertrauenswuerdiger Daten
- CVE-2026-77645nonePTC Windchill: Deserialisierung nicht vertrauenswuerdiger Daten
- CVE-2026-77644nonePTC Windchill: fehlende Authentifizierung fuer kritische Funktion
- CVE-2026-12569criticalptc flexplm: Deserialisierung nicht vertrauenswuerdiger Daten
Other news entries
- Vulnerabilitybsi-cert-bund-wid2026-08-21PTC Windchill und FlexPLM: Mehrere Schwachstellen
- Newssecurityweek2026-08-19Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign
- Newsthehackernews2026-08-19Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
- Newssecurityweek2026-07-27PTC Windchill Vulnerability Exploited in Ransomware Campaign
- Newsthehackernews2026-07-25Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
- Newsbleepingcomputer2026-07-24Clop ransomware targets Windchill, FlexPLM in data theft attacks
- Vulnerabilitysans-newsbites-mail2026-06-30Patch Now: Critical PTC Windchill Vulnerability
- Newscsoonline2026-06-26Hackers exploit critical PTC Windchill PLM software flaw
ID