#ToolShell
Chinese Hackers Tried to Detonate Ransomware Inside a SharePoint Server — Security Software Stopped It Cold
A China-linked crew known as Storm-2603 used Microsoft SharePoint's ToolShell flaws to plant a memory-only backdoor and chase it with Warlock ransomware. The encryption never ran, but the...