Clop ransomware group exploits PTC Windchill and FlexPLM vulnerabilities for data extortion

The Clop ransomware gang is actively targeting internet-exposed instances of PTC Windchill and FlexPLM software to conduct data theft and extortion. It remains uncertain how many organizations have been compromised or the specific vulnerabilities being leveraged in this campaign. This development highlights a shift toward targeting specialized industrial and product lifecycle management software.