warlock
- First seen
- 2021-05-15 00:00:00
- Malware type
- rat, trojan
- Last IoC activity
- 2026-06-20 02:47:08
- Profile updated
- 2026-07-07 13:59:12
Targeted industries: financial-services government-and-public-sector technology-and-telecommunications
Context
Warlock is a remote access trojan used to target financial and governmental institutions. It allows attackers to execute commands on infected systems and exfiltrate sensitive data.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Warlock_Auto (yara-rule)
Reports & references
- ransomlook.io — Warlock (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Warlock (report)
- t0asts.com — Warlock Ransomware (report)
- bleepingcomputer.com — Colt Telecom Attack Claimed By Warlock Ransomware Data Up For Sale (report)