cybercrime.clubhttps://cybercrime.club/tags/byovd/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usFri, 02 Oct 2026 11:05:32 -0400Warlock Ransomware Crew Keeps Breaking In Through SharePoint, Hits Water and Telecom Operatorshttps://cybercrime.club/posts/warlock-ransomware-sharepoint-storm-2603-water-telecom-vscode-tunnel-sysvol/Fri, 02 Oct 2026 11:05:32 -0400https://cybercrime.club/posts/warlock-ransomware-sharepoint-storm-2603-water-telecom-vscode-tunnel-sysvol/Symantec ties the China-linked Storm-2603 (Longlegs) crew to new Warlock ransomware intrusions at a water utility and a telecom, using SharePoint access, a vulnerable K7 driver, VS Code tunnels and SYSVOL deployment.vulnerabilities