Byovd

vulnerabilities 2026-10-02
Warlock Ransomware Crew Keeps Breaking In Through SharePoint, Hits Water and Telecom Operators
Symantec ties the China-linked Storm-2603 (Longlegs) crew to new Warlock ransomware intrusions at a water utility and a telecom, using SharePoint access, a vulnerable K7 driver, VS Code tunnels and SYSVOL deployment.
ransomware sharepoint critical-infrastructure byovd active-exploitation china-nexus

Warlock Ransomware Crew Keeps Breaking In Through SharePoint, Hits Water and Telecom Operators