ThreatCluster

Warlock Ransomware Exploits ToolShell SharePoint Vulnerabilities

First seen 2 Dec 2025, 18:33 UTC •Reddit •100% similarity •23

Article Content

Browse articles
ThreatCluster

Warlock ransomware has been deployed through vulnerabilities in ToolShell SharePoint. Organizations using affected SharePoint versions are at risk, as the ransomware exploits chained vulnerabilities to gain access. Technical details indicate that the attack vector relies on specific weaknesses within the SharePoint infrastructure.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Warlock SharePoint Ransomware