> TritonInfoSec News
Home / Aug 20, 2026 / Story
0
#4 SecurityWeek general August 19, 2026 at 11:07 UTC

Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign

By Eduard Kovacs

AI Summary

The Cl0p ransomware group has publicly named over 40 victims of its PTC Windchill campaign, including Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision. ReliaQuest analysis reveals the JSP web shell deployed post-exploitation is purpose-built for Windchill's PLM environment, capable of decrypting credentials and mapping engineering vault data for extortion.

Read full article → https://www.securityweek.com/cl0p-ransomware-group…

Relevance score: 84.0/100

# More from August 20

  1. 1
    Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation The Hacker News
  2. 2
    Critical RCE flaw in Windows IKE Extension now actively exploited BleepingComputer
  3. 3
    US warns of AI-powered attacks on Siemens PLCs in critical infrastructure BleepingComputer
  4. 5
    Password spraying attacks surge 155x as hackers exploit MFA gaps BleepingComputer
  5. 6
    CISA: Medusa ransomware hit over 500 critical infrastructure orgs BleepingComputer
  6. 7
    Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second The Hacker News
  7. 8
    US charges Iranian hackers over $3.4 billion intellectual property theft BleepingComputer
  8. 9
    Healthtech firm CareCloud data breach impacts 3.7 million patients BleepingComputer
  9. 10
    Microsoft starts removing WMIC tool used by cybercriminals BleepingComputer