API
< Back to situations

[PERSON]

Longlegs

Featured in 1 tracked story · first seen

Situations

[QUIET] [TECHNOLOGY]

Longlegs ransomware attacks on critical infrastructure

2 clusters · 6 sources · last updated

Latest: Warlock ransomware exploits SharePoint flaws to hit critical infrastructure

The China-nexus threat actor known as Longlegs (or Storm-2603) has been deploying Warlock ransomware by exploiting vulnerabilities in on-premises Microsoft SharePoint Server. The group gained prominence in June 2025 thro