Researchers detail Windchill-specific web shell linked to Clop attacks
Image: Primary ReliaQuest analyzed a custom Java web shell likely linked to Clop data-theft attacks against PTC Windchill and FlexPLM servers. The researchers say the tool can use Windchill functions to decrypt credentials, query databases, map file vaults and retrieve files. PTC began releasing fixes for the exploited critical vulnerability on June 17, and CISA later added it to its Known Exploited Vulnerabilities catalog.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
