9ino

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

According to Symantec and Carbon Black researchers, suspected China-linked threat actor Warlock is exploiting Microsoft SharePoint vulnerabilities to target critical infrastructure, government, and education organizations in Portuguese- and Spanish-speaking countries. The attackers use web shells to steal cryptographic keys and maintain access, abuse legitimate tools for remote connections,

News

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing

According to Proofpoint, China-aligned espionage group TA419 is targeting U.S. AI policy experts with phishing emails impersonating trusted researchers and policymakers. The attackers first build trust through seemingly harmless outreach, then send links to convincing fake Microsoft OneDrive sign-in pages. Using adversary-in-the-middle (AitM) techniques,