search
SharePoint
Trends
- 1China-linked Warlock hackers exploit SharePoint flaws in ransomware attacks●🤖 China-linked actor Warlock is weaponizing Microsoft SharePoint flaws to disable security tooling and deploy ransomware
Researchers at Symantec and Carbon Black report that the China-linked group Warlock is exploiting Microsoft SharePoint vulnerabilities to disable security tools and deploy ransomware. At least four organisations have been attacked, including two critical infrastructure operators, in Portuguese- and Spanish-speaking countries. The campaign highlights growing use of legitimate enterprise software flaws by state-aligned ransomware crews.
- 2Warlock ransomware breaches SharePoint in water and telecom attacks▼Warlock ransomware breach SharePoint in water, telecom operator attacks
The Warlock ransomware group has breached Microsoft SharePoint servers as part of attacks on water and telecom operators, BleepingComputer reports. The intrusions appear tied to recent SharePoint vulnerabilities that attackers have been exploiting to steal data and deploy ransomware, raising concerns about critical infrastructure security.
- 3China-linked Warlock group keeps exploiting SharePoint flaws●🤖 China-linked actor Warlock is still exploiting Microsoft SharePoint flaws, both old and new, to disable security tools
Symantec's Carbon Black unit reports that Warlock, a China-linked threat actor, continues to exploit both patched and newly disclosed Microsoft SharePoint vulnerabilities to disable security tools and deploy ransomware. Targets include critical infrastructure, government bodies and educational organisations in Portuguese- and Spanish-speaking countries. Security teams are urged to patch SharePoint servers and monitor for attempts to tamper with endpoint protection.