Clop Tied to PTC Product Lifecycle Management Software Hits

Monday, July 27, 2026 at 07:00 PM UTC·Source: Bank Info Security

Updated: Monday, July 27, 2026 at 07:00 PM UTC

Executive Summary

Analysis

Signs Point to Cl0p Extortion Group Again Stealing Data and Holding It to Ransom Digital extortion group Clop, aka Cl0p, has been tied to a fresh spate of supply-chain attacks, this time targeting users of popular Windchill and FlexPLM product lifecycle management software from PTC. Victims appear to at least span the aerospace, automotive, manufacturing and retail sectors.

Indicators of Compromise (2)

URL (1)

https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/clop-tied-to-ptc-product-lifecycle-management-software-hits-image_small-8-a-32333.jpg

VirusTotal URLhaus

Domain (1)

ismg-cdn.nyc3.cdn.digitaloceanspaces.com

VirusTotal URLhaus

Source Attribution

Originally published by Bank Info Security on Jul 27, 2026.

Related Threats

MEDIUMSupply Chain

New GitHub, PyPI Policies Boost Supply Chain Security

Dependabot gets a three-day cooldown window before opening pull requests, and PyPI rejects file uploads to releases older than 14 days. The post New GitHub, PyPI Policies Boost Supply Chain Security appeared first on SecurityWeek .

11h agoSecurityWeek

CRITICALRansomware

PTC Windchill Vulnerability Exploited in Ransomware Campaign

The critical unsafe deserialization flaw allows attackers to execute arbitrary code remotely, without authentication. The post PTC Windchill Vulnerability Exploited in Ransomware Campaign appeared first on SecurityWeek .

12h agoSecurityWeek

MEDIUMSupply Chain

GitHub, PyPI add time-absed defenses against supply chain attacks

GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to protect against supply-chain attacks and to limit their impact. [...]

1d agoBleepingComputer