The UK -based telecommunications company colt technology services confirms that customer documentation was stolen as Warlock Ransomware gang auction files.
The British telecommunications and network service provider had earlier revealed that he was attacked on August 12, but this is the first time he confirmed that the data was stolen.
“A criminal group has access some files from our system that may contain information related to our customers and posted documents on the dark web,” reads an update Security incident advisor On the site of Colt.
“We understand that it is related to you.”
“Customers are able to request a list of files posted on the dark web from dedicated call center.”
As previously seen by cyber security expert Kevin BeomColt added no-index HTML meta tag to the web page, so that it would not be indexed by the search engine.
After this statement, the Warlock Group began selling the ramp on the cybercrime forum, which they claim that 1 million documents were stolen from the colt. Documents are being sold in $ 200,000 and allegedly include financial information, network architecture data and customer information.
Source: banana
Bleepingcomputer can confirm that the forum ID listed in the forum post matches an ID used in the first editions of the ransom notes of the Rancemware Gang.
The Warlock Group (aka Storm -2603) is a ransomware gang, responsible for Chinese danger actors, who use leak lockbit window and babook VMware ESXI encrypters in attacks.
When the ransomware gang was launched in March 2025, they used lockbit ransomware notes in their attacks, adapted to include a tox ID for ransom talks.
In June, the Rainsmware Gang branded himself as a “Varackock Group”, which with customized ransom notes and dark web talks and data leak sites.
Last month, Microsoft reported that the danger actor was exploiting a Sharepoint vulnerability to dissolve the corporate network and deploy ransomware.
In a conversation viewed by Bleepingcomputer, the ransomware gang demands ransom between $ 450,000 and millions of dollars.
The passwords broke in 46% of the atmosphere, almost doubled by 25% last year.
Picus Blue Report 2025 Now get a wider look at more conclusions on prevention, detection and data exfIs.
