Clop created custom web shell for Windchill data theft attacks

BleepingComputer by Lawrence Abrams 18 August 2026, 20:29 EEST Security

A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal files.

Read the full story on BleepingComputer https://www.bleepingcomputer.com/news/security/clop-created-custom-web-shell-for-windchill-data-theft-attacks/

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

ToxicPanda Android malware uses VPN permissions to block Google Play BleepingComputer
Hackers infect Android car head units with proxy botnet malware BleepingComputer
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 The Hacker News
New SynkLoader malware pushed in Microsoft Teams phishing campaign BleepingComputer