Topic: chinese state-backed groups linen typhoon violet typhoon

Warlock ransomware exploits SharePoint flaws, warns Microsoft

A Chinese hacking group (Storm-2603) is exploiting SharePoint vulnerabilities to deploy Warlock ransomware, targeting over 420 unpatched systems using zero-day exploits like ToolShell. The attackers use Mimikatz and PsExec to steal credentials and move laterally, with at least 400 systems and 148...