Clop Deploys Custom Windchill Web Shell Exploiting CVE-2026-12569
The Clop threat group is likely using a purpose-built web shell to steal data from PTC Windchill and FlexPLM servers. The malware is engineered specifically around Windchill’s internal architecture: it connects to the application...
