Clop Returns with Custom Implant in Mass-Extortion Campaign

Reported 19 Aug 2026 by otx · Severity: medium

The Clop threat group has returned to mass exploitation tactics by leveraging CVE-2026-12569 in PTC Windchill, deploying a sophisticated custom web shell designed specifically for data theft and extortion. This purpose-built implant provides immediate full data-theft capability w