Tag: volume shadow copies

1 Attack Reports | 0 Vulnerabilities

Attack reports

A Deep Dive Into Warlock Ransomware Deployed Via ToolShell SharePoint Chained Vulnerabilities

Warlock ransomware, exploiting SharePoint vulnerabilities CVE-2025-53770 and CVE-2025-53771, represents an advanced threat combining sophisticated encryption methods with targeted defense evasion techniques. The malware employs a multi-stage attack, terminating security services, removing recovery …

defense evasion

vulnerabilities

volume shadow copies

Published: October 30, 2025

Downloadable IOCs: 1

Click here to see more Attack Reports