ThreatCluster

Warlock Ransomware Exploits ToolShell SharePoint Vulnerabilities

First seen 4 Nov 2025, 11:10 UTC •Reddit •100% similarity •22

Article Content

Browse articles
ThreatCluster

Warlock ransomware has been deployed using vulnerabilities in ToolShell SharePoint. The attack leverages chained vulnerabilities to gain access and encrypt data. Organizations using affected SharePoint systems are at risk of data loss and operational disruption.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Warlock SharePoint Ransomware