Warlock Targets Water and Telecom Operators with SharePoint, VS Code Tunnels, and SYSVOL

Symantec’s Threat Hunter Team reported on October 1, 2026 that the China-nexus group it tracks as Longlegs—also known as Microsoft Storm-2603—had attacked at least four organizations during the preced