The Clop web shell targets PTC Windchill via CVE-2026-12569, stealing credentials and engineering data in a mass-extortion campaign. Related Posts: WordlistLoader Delivers Amatera Stealer Through ClearFake Campaigns C2Looper: Rust Backdoor Uses GitHub for C2 Control Manic Android Malware Steals Data Without Active Internet The post Clop Deploys Custom Web Shell in PTC Windchill Extortion Attacks appeared first on Daily CyberSecurity.

A Head Mare TrueConf attack chains two zero-days to install the PhantomCore backdoor via a trojanized client. Related Posts: DEF CON Attendee Suspected in Fake WiFi Attack Targeting Delta Flight 591 Passengers UNC6671 Vishing Extortion Rebrands Across 5 Brands Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks The post Head Mare APT Exploits TrueConf Server Flaws to Deploy PhantomCore Backdoor appeared first on Daily CyberSecurity.