Cl0p Ransomware Gang Exploits PTC Windchill Flaws in Data Extortion Campaign

Cl0p affiliates are exploiting unauthenticated remote code execution vulnerabilities in internet-exposed PTC Windchill and FlexPLM deployments. The attack chains an information disclosure flaw with a server-side bug to gain access. The campaign focuses on data extortion rather than encryption.