https://news.sophos.com/en-us/2025/09/17/gold-salems-warlock-operation-joins-busy-ransomware-landscape/
GOLD SALEM’s Warlock operation joins busy ransomware landscape – Sophos News
The emerging group demonstrates competent tradecraft using a familiar ransomware playbook and hints of ingenuity
ransomware landscapegoldjoins
https://www.security.com/threat-intelligence/warlock-ransomware-origins
Warlock Ransomware: Old Actor, New Tricks? | SECURITY.COM
The China-based actor behind the Warlock ransomware may not be a new player and has links to malicious activity dating as far back as 2019.
warlock ransomwareoldactornew
https://www.computerweekly.com/news/366632598/Warlock-ransomware-may-be-linked-to-Chinese-state
Warlock ransomware may be linked to Chinese state | Computer Weekly
Oct 9, 2025 - The operators of Warlock ransomware who exploited a set of SharePoint Server vulnerabilities earlier this year likely have some kind of link to the Chinese...
warlock ransomwaremaylinked