Skip to main content
Back to Newswire
Security

Researchers detail Windchill-specific web shell linked to Clop attacks

Researchers detail Windchill-specific web shell linked to Clop attacks Image: Primary
ReliaQuest analyzed a custom Java web shell likely linked to Clop data-theft attacks against PTC Windchill and FlexPLM servers. The researchers say the tool can use Windchill functions to decrypt credentials, query databases, map file vaults and retrieve files. PTC began releasing fixes for the exploited critical vulnerability on June 17, and CISA later added it to its Known Exploited Vulnerabilities catalog.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire