TrendMicro has published an analysis of Warlock, the ransomware group that most likely was behind the attack on Colt.
https://www.trendmicro.com/en_us/research/25/h/warlock-ransomware.html
Kevin Beaumont (npub1lcc…lcye) Catalin Cimpanu (npub1s69…rmen)
#ThreatIntel #Cybersecurity #Infosec
Christoffer S.
npub1nf…8yzp9
2025-08-20 14:02:55 UTC
Author Public Key
npub1nfcxlme0vu874ttzet99lr9z67qz2my0ks37y23fm5c3re7flynqp8yzp9Seen on
wss://relay.momostr.pinkPublished at
2025-08-20 14:02:55 UTCEvent JSON
{
"id": "67e1d051dc497577aa39da965eed1fec5d9f1936c4e06a43383165b02db760de",
"pubkey": "9a706fef2f670feaad62caca5f8ca2d780256c8fb423e22a29dd3111e7c9f926",
"created_at": 1755698575,
"kind": 1,
"tags": [
[
"t",
"cybersecurity"
],
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"t",
"threatintel"
],
[
"t",
"infosec"
],
[
"p",
"868a45a1b5adcf4897a95cb07885383bb4e8d113d8012cea755381665b216bb1"
],
[
"proxy",
"https://swecyb.com/@nopatience/115061461874194550",
"web"
],
[
"proxy",
"https://swecyb.com/users/nopatience/statuses/115061461874194550",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://swecyb.com/users/nopatience/statuses/115061461874194550",
"pink.momostr"
],
[
"-"
]
],
"content": "TrendMicro has published an analysis of Warlock, the ransomware group that most likely was behind the attack on Colt.\n\nhttps://www.trendmicro.com/en_us/research/25/h/warlock-ransomware.html\n\nnostr:npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcye nostr:npub1s69ytgd44h8539aftjc83pfc8w6w35gnmqqje6n42wqkvkepdwcs7mrmen \n#ThreatIntel #Cybersecurity #Infosec",
"sig": "925755b1a5610f82c1bd49abb0695dece6d1a804427e3a1ae9943f07ee741d89442661fc505e6941c986f7f53b2e7c2fb72bfa0dbd6e0619133a87a13d245969"
}