Exploits Velociraptor DFIR Tool in Sophisticated Ransomware Attacks Involving Warlock, LockBit
Threat actor Storm-2603, also known as Gold Salem, is weaponizing the Velociraptor DFIR tool in targeted ransomware attacks exploiting SharePoint vulnerabilities via ToolShell. According to Cisco Talos and Sophos, attackers…