Warlock ransomware attacks water and telecommunications organizations through SharePoint
The China-linked ransomware group Warlock targeted a water utility, a telecommunications provider, a regional government body, and a university by exploiting SharePoint vulnerabilities for initial access. In the attacks, protection software was disabled on at least 40 hosts and Warlock ransomware was launched on at least 33 hosts.
CERT24