Cyber Attack·Energy & UtilitiesBreakingChina-Nexus Warlock Ransomware Crew Breaches Water Utility and Telecom Operator Through Unpatched SharePointLonglegs (Storm-2603) used on-prem SharePoint access, a BYOVD EDR killer and SYSVOL replication to push Warlock ransomware to 33+ hosts. IOCs inside.Mei-Lin Chen4 Oct 20269 min read
