Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Ransom Note: mail_CVE‑2026‑12569.txt

Group: Clop

Dear company,

We are warning you that all your confidential information has been uploaded to our servers!
A vulnerability was exploited in Windchill software, the PDMLink module.
This means that all your private data is in our hands.

*************************************************************

Our name is cl0p, you can anytime google about us online and check our group blog.
Ignoring this email or ignoring this situation will end with the publication of all confidential information on our blog.

*************************************************************

Our contact information is you can see lower:
support@cryptohox.com
support@cypherhex.com

Time is ticking, this is the last warning ©cl0p^ team

Indicators of Compromise
Type IOC
email support@cryptohox.com
email support@cypherhex.com