GoKawiilWarlock Ransomware Targets Spanish- and Portuguese-Speaking Nations' Infrastructure
Symantec reports that the Warlock ransomware group, also tracked as Longlegs or Storm-2603, has recently focused attacks on organizations in Spanish- and Portuguese-speaking countries. Over the past two months the group hit four high-value targets: a water utility, a telecom provider, a regional government body, and a university, gaining initial access via Microsoft SharePoint vulnerabilities including the ToolShell exploit chain.