A Deep Dive Into Warlock Ransomware Deployed Via ToolShell SharePoint Chained Vulnerabilities

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Warlock Ransomware Exploits ToolShell SharePoint Vulnerabilities Warlock ransomware has been deployed using vulnerabilities in ToolShell SharePoint. The attack leverages chained vulnerabilities to gain access and encrypt data. Organizations using affected SharePoint systems are at risk of data loss and operational disruption. 2 sources 22