Warlock ransomware breach SharePoint in water, telecom operator attacks

The China-linked ransomware group Warlock has conducted targeted attacks against critical infrastructure and public sector organizations, including a water utility, a telecom provider, a regional government body, and a university. The group exploited vulnerabilities in Microsoft SharePoint to gain initial access to victim networks. The campaign demonstrates a pattern of targeting critical infrastructure sectors with sophisticated ransomware attacks. The attacks highlight the ongoing threat posed by state-linked ransomware groups against essential services. Exploitation of SharePoint vulnerabilities as an initial access vector represents a significant risk for organizations relying on the platform.