CRITICALRansomware
Global

'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries

·Source: The Record

Updated:

Executive Summary

The group is exploiting a variety of vulnerabilities impacting Microsoft SharePoint, according to a new report from Symantec Threat Hunter Team.

Analysis

The group is exploiting a variety of vulnerabilities impacting Microsoft SharePoint, according to a new report from Symantec Threat Hunter Team.
Source Attribution

Originally published by The Record on Oct 2, 2026.

Related Threats

HIGHRansomware

Warlock ransomware breach SharePoint in water, telecom operator attacks

The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...]

BleepingComputer
HIGHRansomware

Mississippi mayor says ransomware incident led city to shut down systems

Government services were temporarily disrupted by ransomware in Vicksburg, Mississippi. Mayor Willis Thompson said the FBI and other authorities are investigating.

The Record
CRITICALRansomware

City of Vicksburg, Mississippi, shuts down computers after cyberattack

Joseph Topping reports: The City of Vicksburg, Mississippi, has shut down its computer systems after a ransomware attack, potentially delaying in-person utility payments while emergency response and utility service continue. Mayor Willis Thompson told The Vicksburg Post that the city had disconnected its internet operations. “We had to bring our internet operations down, just for... Source

DataBreaches.net