Archive · 24 Jul 2025
Microsoft Warns of SharePoint Server Hacks Using Ransomware
Some bad guys are breaking into computers that use Microsoft SharePoint, a software used to store and share files.
They used a secret flaw in the software to get in.
Now, instead of just stealing info, they're using "ransomware."
This is like locking up your computer files until you pay them money.
Microsoft says this is happening, and it's already caused problems for at least 400 different places.
One of them is the National Institutes of Health.
It's a serious problem because it can stop people from using their computers and make it hard to do their jobs.
Microsoft reports cyber-espionage campaign using ransomware.
Hackers exploit vulnerability in Microsoft's SharePoint server software.
The group, dubbed "Storm-2603", is deploying ransomware.
At least 400 victims have been affected, with the number likely higher.
The National Institutes of Health confirmed one server compromised.
- Who
- Group "Storm-2603" using the vulnerability.
- What
- Cyber-espionage campaign deploying ransomware.
- When
- Reported in a recent Microsoft blog post.
- Where
- Affecting various organizations.
- Why
- To paralyze victims' networks for ransom.
- Software
- Microsoft SharePoint server
- Attack Type
- Ransomware
- Victims
- At least 400 organizations
- Reported By
- Microsoft
- Group Name
- Storm-2603
- Affected Org
- National Institutes of Health