K7 Computing

Warlock ransomware targeted water and telecom operators in Portuguese- and Spanish-speaking countries across Europe, Africa, and Latin America. Attackers used a vulnerable signed driver (K7RKScan) to disable security software, abused Visual Studio Code tunneling for covert remote access, and leveraged SYSVOL to spread ransomware across domains. The campaign demonstrated...