Threat Actor
Cl0p
- First Reported
- Aug 18, 2026
- Latest Reported
- Oct 7, 2026
Reported Context (4)
- Ransomware group whose listed education victim activity was concentrated in September. CYFIRMA Report Highlights Elevated Cyber Risks Facing the Education Sector
- Ransomware group listed in NCC Group's reported attack counts. Japan Arrests Qilin Ransomware Member and Extradites Him to Germany
- Also named Clop in the report; reportedly exploited vulnerabilities in PTC Windchill and FlexPLM and added organizations to its victim list. AhnLab’s August 2026 Ransomware Report Details Victim Trends and Major Attacks
- Alternate name explicitly given for Clop, the group highly likely linked to the custom Windchill web shell. Clop-linked Windchill Web Shell Steals Credentials and Maps Engineering Data
CVE (3)
Malware (3)
People (2)
Threat Actors (50)
MITRE ATT&CK (8)
Vendors (6)
Products (11)
Industries (13)
Countries (31)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.