Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware Trend Micro Research, News, Perspectives By: Jeffrey Francis Bonaobra Joshua Aquino Mohammed Malubay John Paul Lim Emmanuel Panopio Emmanuel Roll Melvin Singwa Carl Jayson PeliΓ±a Armando Nathaniel Pedragoza 19 August 2025 at 20:00 Warlock ransomware exploits unpatched Microsoft SharePoint vulnerabilities to gain access, escalate privileges, steal credentials, move laterally, and deploy ransomware with data exfiltration across enterprise environments.