Warlock expands SharePoint exploitation in attacks on critical infrastructure
The Warlock ransomware group continues to target SharePoint servers in attacks on critical infrastructure, government and educational institutions, Symantec reports. Warlock is believed to be operated by a China-based hacking group called Longlegs and Storm-2603, which has been linked to malicious operations such as CL-CRI-1040, CamoFei and ChamelGang. Last year, Chinese state-sponsored groups Linen Typhoon … Read more
