How Clop accessed the enterprise blueprint with no credentials

The Windchill campaign shows how a trusted enterprise app can conceal data theft, credential access, and persistent control.