Threat Actor
Warlock
Properties
- summary
- Warlock exploited Microsoft SharePoint vulnerabilities to disable security tools and deploy ransomware against critical infrastructure organizations.
- first_seen
- 2026-10-05T04:00:18.532174+00:00
- last_seen
- 2026-10-05T04:00:18.532174+00:00
- created_at
- 2026-10-05T04:00:18.532174+00:00
- mention_count
- 1
- evidence_url
- https://thehackernews.com/2026/10/warlock-exploits-sharepoint-flaws-to.html
- target
- Critical infrastructure in Portuguese- and Spanish-speaking countries
- provenance
- news-scan
- suspected_origin
- China
- scan_confidence
- 0.75
- status
- pending
Explore this actor's full graph with Ninja Signal