Warlock ransomware breach SharePoint in water, telecom operator attacks

October 1, 2026 · 1:00 pm 4 sources

Image: Dark Reading

Coverage

Coverage

• Warlock Ransomware Hits Large Spanish, Portuguese Orgs
  Dark Reading · October 1, 2026 13:00
  A year-old Chinese threat actor looks like a cybercrime gang, acts like a state-associated APT, and attacks organizations in unexpected places.
• Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks
  SecurityWeek · October 2, 2026 09:34
  The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek .
• 'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries
  The Record by Recorded Future News · October 2, 2026 14:05
  The group is exploiting a variety of vulnerabilities impacting Microsoft SharePoint, according to a new report from Symantec Threat Hunter Team.
• Warlock ransomware breach SharePoint in water, telecom operator attacks
  BleepingComputer · October 2, 2026 18:33
  The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...]