Threat Actor
Cl0p
Also known as: Chubby Scorpius, FIN11, Graceful Spider, Lace Tempest
Properties
- summary
- Cl0p affiliates exploited unauthenticated RCE flaws in internet-exposed PTC Windchill and FlexPLM deployments as part of a data extortion campaign.
- first_seen
- 2026-07-27T04:00:26.959997+00:00
- last_seen
- 2026-07-27T04:00:26.959997+00:00
- created_at
- 2026-07-27T04:00:26.959997+00:00
- mention_count
- 1
- evidence_url
- https://thehackernews.com/2026/07/cl0p-affiliates-target-internet-exposed.html
- target
- Manufacturing/industrial sectors (PTC Windchill and FlexPLM users)
- provenance
- news-scan
- scan_confidence
- 0.9
- suspected_origin
- Russia
- status
- pending
Explore this actor's full graph with Ninja Signal