Executive Summary

China‑linked ransomware group Warlock exploited SharePoint vulnerabilities to gain initial access and compromise a water utility, a telecom provider, a regional government body, and a university. The attacks leveraged the same SharePoint flaw to move laterally and encrypt data, demanding ransom payments.

---

Intelligence Metadata - Source Publisher: Bleeping Computer - Published Date: 2026-10-02T18:33:01+00:00 - Category: threat-intel

Original Description: The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...]

"I'm a great believer in luck and I find the harder I work, the more I have of it."

— Thomas Jefferson