securityBACKGROUND
Clop created custom web shell for Windchill data theft attacks
BACKGROUND
1 SIGNALFIRST DETECTED 18 August 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
18 Aug
Clop created custom web shell for Windchill data theft attacks
REPORT · WHAT · BleepingComputer
Other feeds and industry voices
24 Jul
Clop ransomware targets Windchill, FlexPLM in data theft attacks
The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign. [...]
REPORT · WHAT · BleepingComputerOPEN STORY
25 Jul
Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploiting flaws in internet-exposed PTC Windmill and
REPORT · WHAT · The Hacker NewsOPEN STORY
Sources
BleepingComputer
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →