#2
BleepingComputer
general
October 02, 2026 at 18:33 UTC
Warlock ransomware breach SharePoint in water, telecom operator attacks
By Ionut Ilascu
AI Summary
The China-linked ransomware group Warlock targeted critical infrastructure including a water utility, telecom provider, regional government, and university by exploiting Microsoft SharePoint vulnerabilities for initial access. Symantec's Threat Hunter Team attributes the campaign to a Chinese nexus actor active since at least July 2025, targeting Portuguese and Spanish-speaking organizations.
Relevance score: 90.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →