Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE3 IOCs
Cl0p Hackers Exploit PTC Windchill RCE Flaw to Deploy Custom Data-Theft Web Shell
Threat Actors
Malware Families
Diamond Model
Adversary(1)
Infrastructure(1)
Capability(1)
Victim
Indicators of Compromise
Indicators of Compromise3
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-12569 exfiltrationexploitintel-blog | High | 66 | Jun 30, 26 |
| IP | 5.180.41.35 exploitindicatorintel-blog | Medium | 47 | Jul 13, 26 |
| SHA256 | 321e1fb01eb3462b48ff6ccdef132acc1182e3f7456548439f0d4ead12fd98bf exploitfile-hashintel-blog | Medium | 53 | Aug 19, 26 |
IOC Relationship Graph
IOC Relationship Graph3 total IOCs
CVEIPSHA256