Warlock Ransomware Hits Major Spanish, Portuguese Organizations

The Warlock group, active for about a year and linked to China, is attacking large organizations in Spain and Portugal. Its behavior blends traits of a cybercrime gang and a state-associated APT.

• Warlock has been active for about a year and is linked to Chinese actors
• Targets include large organizations in Spain and Portugal
• The group blends traits of a cybercrime gang and a state APT