Project AK47: Uncovering a Link to the SharePoint Vulnerability Attacks

Unit 42 has uncovered that a financially motivated threat cluster—linked to both LockBit and Warlock ransomware—has been exploiting recent Microsoft SharePoint vulnerabilities using a custom malware toolkit dubbed Project AK47, revealing direct operational overlap with the Storm-2603 actor tracked by Microsoft.