CERT24Warlock group attacks water and telecommunications operators through SharePoint vulnerabilitiesLoading data…
CERT24Threat Observatory
Period

Warlock group attacks water and telecommunications operators through SharePoint vulnerabilities

The China-nexus threat actor behind Warlock ransomware, tracked by Symantec as Longlegs and Storm-2603, attacked at least four organizations during the past two months. Victims included water and telecommunications operators, a regional government body, and a university in Portuguese- and Spanish-speaking countries across Europe, Africa, and Latin America.

← Back to intelligence

Warlock group attacks water and telecommunications operators through SharePoint vulnerabilities

The China-nexus threat actor behind Warlock ransomware, tracked by Symantec as Longlegs and Storm-2603, attacked at least four organizations during the past two months. Victims included water and telecommunications operators, a regional government body, and a university in Portuguese- and Spanish-speaking countries across Europe, Africa, and Latin America.