Colt Technology Services confirmed that customer data was stolen during a cyberattack and is now being auctioned by the Warlock ransomware gang. The threat group, linked to Chinese actors, is selling stolen documents that contain sensitive customer, financial, and network information. #WarlockGroup #ColtDataBreach
Keypoints
- The attack on Colt Technology Services involved the theft and auction of customer documents by the Warlock ransomware gang.
- The stolen files include sensitive customer, financial, and network architecture information.
- The Warlock Group, linked to Chinese threat actors, uses LockBit and Babuk malware in their operations.
- Colt confirmed the theft after initially reporting the attack in August, with data being sold for $200,000.
- Microsoft reported that the group exploited a SharePoint vulnerability to deploy ransomware in recent attacks.