Mmastodon TechnologyCybersecurity first seen 16 h ago, last 16 h ago, peak #11

China-linked Warlock group keeps exploiting SharePoint flaws

Original: 🤖 China-linked actor Warlock is still exploiting Microsoft SharePoint flaws, both old and new, to disable security tools

Symantec's Carbon Black unit reports that Warlock, a China-linked threat actor, continues to exploit both patched and newly disclosed Microsoft SharePoint vulnerabilities to disable security tools and deploy ransomware. Targets include critical infrastructure, government bodies and educational organisations in Portuguese- and Spanish-speaking countries. Security teams are urged to patch SharePoint servers and monitor for attempts to tamper with endpoint protection.

Why now: Organisations are on alert over ongoing ransomware attacks exploiting SharePoint flaws.

WarlockMicrosoft SharePointSymantecCarbon Black

Open on mastodon →

Evidence

• 🤖 China-linked actor Warlock is still exploiting Microsoft SharePoint flaws, both old and new, to disable security tools and deploy ransomware. Targets: critical infrastructure, government and education orgs in Portuguese- and Spanish-speaking countries (Symantec/Carbon Black).… · cloud@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/878719