Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Storm-2603 Hackers Exploit SharePoint ToolShell Flaws to Hide Fileless Backdoor and Launch Ransomware Attack
A China-linked threat group tracked as Storm-2603 has used the SharePoint ToolShell flaws to plant a backdoor that never touches the disk. The group then tried to run Warlock ransomware on the same network. The break-in hit an on-premises SharePoint server and ended with a ransomware launch that security software blocked. ToolShell is the name […] The post Storm-2603 Hackers Exploit SharePoint ToolShell Flaws to Hide Fileless Backdoor and Launch Ransomware Attack appeared first on Cyber Security News.
A China-linked threat group tracked as Storm-2603 has used the SharePoint ToolShell flaws to plant a backdoor that never touches the disk. The group then tried to run Warlock ransomware on the same network. The break-in hit an on-premises SharePoint server and ended with a ransomware launch that security software blocked. ToolShell is the name for a set of Microsoft SharePoint bugs, including CVE-2025-53770 and CVE-2025-53771. They let an attacker run code on a server through specially crafted web requests. Microsoft…
Excerpt shown under the publisher's RSS terms · 81 words · full text and figures are on the publisher's site
Related coverage
Warlock Ransomware Exploiting SharePoint Flaws to Attack Water and Telecom Operators
Cybersecurity News · Oct 1, 2026
CISA Adds Microsoft SharePoint Weak Authentication Vulnerability to KEV List
Cybersecurity News · Aug 19, 2026
October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
CrowdStrike Blog · Oct 13, 2026
New Spirals Ransomware Uses IIS Web Shell and PsExec to Encrypt IT Firm in Under 24 Hours
Cybersecurity News · Jul 18, 2026