Warlock ransomware attackers have targeted a water utility, a telecommunications provider, a regional government body and a university through vulnerable SharePoint servers. Researchers at Symantec and Carbon Black linked the intrusions to Longlegs, a China-linked group associated with Warlock’s development. During the past two months, its activity appears to have concentrated on Portuguese- and Spanish-speaking…
The ransomware group WarLock has escalated its activities sharply, claiming over 60 victims in September 2025. Also known as Gold Salem or Storm-2603, the group has targeted major enterprises, telecoms, and government agencies worldwide. The WarLock ransomware attacks surge highlights how quickly a new group can rise in prominence. Who Is WarLock? First observed in…