TI Mindmap HUB
Threat Intelligence Report

GOLD SALEM’s Warlock operation joins busy ransomware landscape – Sophos News

📅 October 13, 2025 📰 news.sophos.com 🔍 5 CVE(s) referenced

The Warlock Group (GOLD SALEM) has rapidly emerged as a significant ransomware threat in 2025, leveraging advanced exploits and aggressive tactics to target organizations worldwide, including a rare attack on a Russian entity, while actively seeking new tools and partners in underground forums.

vendor
CVE-2024-51324, CVE-2025-49704, CVE-2025-49706, CVE-2025-53770, CVE-2025-53771

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle