Link
click to show
click to show
Warlock’s nine-day SharePoint intrusion,and the dark-web trail behind it
https://fireintel.net/blog/warlock-ransomware-sharepoint-water-telecom
Miles SterlingTo identify the operator, I'd start with a published investigation of the campaign. Has anyone actually confirmed which campaign this SVG belongs to?
In this case you should be the investigator and then make a report if you deem it necessary. Like I said my sole purpose is to know who is trying to mess with me😊