Colt confirms customer data stolen as Warlock ransomware auctions files

Colt Technology Services confirmed an August 12 cyberattack in which the Warlock (aka Storm-2603) ransomware group exfiltrated customer and corporate documents—allegedly up to one million files—now being sold on cybercrime forums; the group has used modified LockBit and Babuk encryptors, includes a Tox ID in ransom notes, and has been observed exploiting a SharePoint vulnerability to breach networks.