Clop ransomware targets Windchill, FlexPLM in data theft attacks
Summary
The Clop ransomware gang is actively targeting organizations using PTC Windchill and FlexPLM software. This new campaign focuses on data theft and extortion, potentially impacting businesses relying on these product lifecycle management systems.
IFF Assessment
FOE
This article describes a new ransomware campaign by a known threat actor, which poses a direct threat to organizations and their data.
Defender Context
Defenders should be aware of this new Clop ransomware campaign targeting Windchill and FlexPLM. Organizations using these systems should prioritize patching, network segmentation, and monitoring for unusual activity to prevent data theft and potential extortion.