Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE2 IOCs
Cl0p Exploits PTC Windchill Zero-Day to Deploy Webshells and Steal Data
Threat Actors
Malware Families
Diamond Model
Adversary(2)
Infrastructure
Capability(1)
Victim
5W+H Threat Analysis
Analysis unavailable
Indicators of Compromise
Indicators of Compromise2
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-12569 exfiltrationexploitintel-blog | Medium | 57 | Jun 30, 26 |
| SHA256 | 55a1eb4c2d3da04376df39d7ba832569c6af1a37a0cf2b95f754ac898023a30c file-hashindicatorintel-blog | Medium | 43 | Jun 23, 26 |
IOC Relationship Graph
IOC Relationship Graph2 total IOCs
CVESHA256