Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
critical threatRansomwareMalware Family
Historical
Cl0p
Critical severity
199
IOCs Tracked
—
First Seen
—
Last Seen
0
YARA Rules
Associated IOCs199 total · showing 50
IP49
209.99.185.962026-07-17High
178.255.126.1462026-07-14High
102.220.160.2172026-09-09High
162.35.164.2492026-07-21High
124.198.132.982026-06-28High
172.81.61.1082026-07-09High
161.97.118.2072026-06-20High
198.23.185.1362026-07-25High
64.89.162.822026-07-14High
172.94.18.1032026-09-22High
192.140.175.1942026-07-27High
89.42.134.2202026-09-22High
172.111.162.2522026-08-31High
138.124.61.652026-06-30High
50.114.179.1652026-06-28High
128.90.63.862026-06-20High
103.241.64.922026-07-18High
64.176.189.402026-06-20High
198.23.185.822026-07-27High
194.11.246.1912026-07-11High
CVE1
CVE-2026-202452026-07-24High
Related Reports21 shown
Supply Chain Attacks in 2026: Why Threat Intelligence Is the Only Early Warning System That Works
CybleSep 3, 2026
Endpoint Blind Spots: The 5 Places Ransomware Hides Before It Detonates
CybleAug 21, 2026
Weekly Threat Landscape Digest – Week 34
HawkEyeAug 21, 2026
Cl0p Hackers Exploit PTC Windchill RCE Flaw to Deploy Custom Data-Theft Web Shell
Cyber PressAug 19, 2026
Shell Investigates Data Breach After Cl0p Ransomware Group Claims 89 GB Data Theft
Cyber PressAug 17, 2026
Ransomware Threats in the Americas H1 2026: Dissecting the Regional Attack Patterns and Dominant Actors
CybleAug 14, 2026
Ransomware Now Shows Up in Nearly Half of All Breaches: A Survival Playbook for Lean Security Teams
CybleAug 10, 2026
The Assets You Don’t Know You Own: Attack Surface Sprawl Is a Discovery Problem, Not a Tooling Problem
CybleAug 3, 2026
CyberPress Weekly – Top 50 Cybersecurity Stories of the Week – Cl0p Windchill Zero-Day, Zimbra Attacks, 23M-User Breach, AI Exploits & More
Cyber PressJul 27, 2026
Cl0p Exploits PTC Windchill Zero-Day to Deploy Webshells and Steal Data
Cyber PressJul 24, 2026
Weekly Threat Landscape Digest – Week 27
HawkEyeJul 3, 2026
Turla Hackers Use STOCKSTAY .NET Backdoor to Spy on Ukrainian Government and Military Targets
Cyber PressJun 29, 2026
Maltrail IOC for 2026-06-19
CIRCL OSINT FeedJun 19, 2026
Maltrail IOC for 2026-06-19
CIRCL OSINT FeedJun 19, 2026
Oracle PeopleSoft Zero-Day Exploited in Ransomware Attacks, Warns CISA
Cyber PressJun 17, 2026
THREAT ADVISORY MUNICIPAL ENERGY SECTOR June 8, 2026
Blackswan CybersecurityJun 8, 2026
CISA Warns of Exploited SolarWinds Serv-U Vulnerability
Cyber PressJun 6, 2026
IT threat evolution in Q1 2026. Non-mobile statistics
SecurelistMay 18, 2026
State of ransomware in 2026
SecurelistMay 12, 2026
How to Recover from a Ransomware Attack Without Paying the Ransom
SeqriteMay 25, 2026
Cyber Conflict Briefing Q4 2025
DCSO CyTec BlogFeb 13, 2026
Threat Profile
TypeRansomware
StatusHistorical
IOCs tracked199