Storm-2603 exploits SharePoint flaws and uses Cloudflare Tunnel to keep remote access
THREAT ACTORStorm-2603redteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A China-based hacking group, Storm-2603, broke into systems through weaknesses in Microsoft SharePoint software in December. Microsoft links the group to Warlock ransomware, and the attackers hid their access by setting up several tunnels so they could return after their first entry point was gone.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- No action needed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Threat actors
Products