The activity has been attributed to Storm-2603, which, according to Microsoft, is a suspected China-based threat actor that ...

Storm-2603 exploits SharePoint flaws to deploy Warlock ransomware, affecting 400+ victims. Microsoft urges mitigation.

Microsoft has observed two named Chinese nation-state actors, Linen Typhoon and Violet Typhoon, exploiting vulnerabilities ...

Let the games begin Ransomware has officially entered the Microsoft SharePoint exploitation ring.… Late Wednesday, in an ...

Microsoft said Chinese actor Storm-2603 is deploying Warlock ransomware following the exploitation of vulnerabilities in on-prem SharePoint systems ...

Microsoft has observed three China-based threat actors, Linen Typhoon, Violet Typhoon and Storm-2603, exploiting the ...

Microsoft says the Chinese threat actors Linen Typhoon, Violet Typhoon, and Storm-2603 have been exploiting the ToolShell ...

Microsoft is warning organizations about active exploitation of on-premises SharePoint servers by the Storm-2603 group.