ShinyHunters hacks rival extortion gang and takes over its dark web site
ShinyHunters claims it hacked rival extortion gang Clop's leak site via a Grav CMS flaw and seized its onion domain.
55
Product
PTC Windchill
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 19, 2026
- Last mentionedSep 21, 2026
Timeline
3 articles · newest first⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
US agencies warn of AI-assisted attacks on exposed Siemens PLCs; the week also saw GitLab CVE-2026-19478 exploited and trojanized npm packages found.
65
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
ReliaQuest details a bespoke JSP web shell that Clop deploys on hacked PTC Windchill and FlexPLM servers after exploiting CVE-2026-12569.
76
Related CVEs
by mentions- CVE-2026-1256946%9.3Unauthenticated RCE in PTC Windchill and FlexPLM
- CVE-2026-194786%9.1Unauthenticated GraphQL Code Injection in GitLab CE/EE Enables Data Tampering
Appears with
- Clopthreat actor · 2
- ReliaQuestorganization · 2
- Philipsvictim · 1
- Lumenorganization · 1
- UNC7005threat actor · 1
- FlexPLMproduct · 1
- ShinyHuntersthreat actor · 1
- Clop Windchill web shellmalware · 1
- Grav CMSvendor · 1
- The Hacker Newsorganization · 1
- Siemens S7product · 1
- watchTowrorganization · 1
- BleepingComputerorganization · 1
- Oraclevendor · 1
- Ransom-ISACorganization · 1
- GitLabvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.