INCIDENT EVIDENCE GRAPH

Warlock ransomware breach SharePoint in water, telecom operator attacks

2026-10-02T18:33:01Z

The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...]

• Victim: a water utility, a telecom provider, a regional government body, and a university
• Actor: Warlock
• Exploit: SharePoint vulnerabilities
• Method: Exploiting SharePoint vulnerabilities for initial access

Primary evidence

1. Warlock ransomware breach SharePoint in water, telecom operator attacks

中文