Clop Ransomware Group Exploits Zero-Day Vulnerability in PTC Software

The Clop ransomware group exploited a critical zero-day vulnerability in PTC’s product lifecycle management software, including Windchill and FlexPLM, in June 2024. The group began sending extortion emails to victims approximately one month after the initial compromise. The attack involved data theft and extortion tactics, though no specific CVE ID or technical details of the vulnerability were disclosed. The incident highlights ongoing risks from zero-day exploits used by cybercrime groups to target enterprise software. No confirmed impact on affected organizations beyond data theft and extortion demands was detailed.