Mmastodon TechnologyCybersecurity first seen 8 h ago, last 8 h ago, peak #10

China-linked Warlock hackers exploit SharePoint flaws in ransomware attacks

Original: 🤖 China-linked actor Warlock is weaponizing Microsoft SharePoint flaws to disable security tooling and deploy ransomware

Researchers at Symantec and Carbon Black report that the China-linked group Warlock is exploiting Microsoft SharePoint vulnerabilities to disable security tools and deploy ransomware. At least four organisations have been attacked, including two critical infrastructure operators, in Portuguese- and Spanish-speaking countries. The campaign highlights growing use of legitimate enterprise software flaws by state-aligned ransomware crews.

Why now: Security researchers just published findings showing a China-linked group combining espionage-style tradecraft with ransomware against critical infrastructure.

WarlockMicrosoft SharePointSymantecCarbon Black

Open on mastodon →

Evidence

• 🤖 China-linked actor Warlock is weaponizing Microsoft SharePoint flaws to disable security tooling and deploy ransomware. Symantec/Carbon Black observed attacks on at least 4 orgs, incl. 2 critical infrastructure operators, in PT/ES-speaking countries. 🔗 https://… · cloud@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/993555