Warlock ransomware targets critical infrastructure

Warlock ransomware is targeting critical infrastructure. Targets include water and telecommunications operators. The attacks span Portuguese- and Spanish-speaking countries. The campaign exploits SharePoint flaws to disable security tools and deploy ransomware.

Published 2026-10-04 11:03:22.490967+00:00 · First seen 2026-10-04 08:01:51.339284+00:00

Corroborating sources

• BleepingComputer · 2026-10-02T18:33:01+00:00 · Independent report
  Shared subjects: sharepoint, warlock · Event: breach, ransomware
• The Hacker News · 2026-10-03T14:36:33+00:00 · Independent report
  Shared subjects: sharepoint, warlock · Event: ransomware
• The Record · 2026-10-02T14:05:00+00:00 · Independent report
  Shared subjects: warlock · Event: ransomware

Independent publishers report the same event within 72 hours. Methodology