🕵️ Warlock

The items that name it 3

• Making sure the checks get printed
  article2026-10-08

  Ransomware that hit large Spanish and Portuguese organizations over the last two months, targeting a water utility, a telecommunications provider, a regional government body, and a university

• Trial, Error & Typos: Malware Isn't Always 'Sophisticated' | Huntress
  writeup2025-12-22It is written here as Warlock (ransomware).

  Ransomware deployed in the November incident involving Velociraptor DFIR platform.

• Velociraptor Misuse, Pt. II: The Eye of the Storm
  writeup2025-12-03

  Ransomware variant that debuted in June 2025; used in Incident 3, previously observed being deployed by threat actors using Velociraptor and VS Code tunnels to attacker-controlled C2