Ransomware crims that exploited SharePoint 0-days add Velociraptor to their arsenal

And they’re likely still abusing the same SharePoint flaws for initial access

The ransomware gang caught exploiting Microsoft SharePoint zero-days over the summer has added a new tool to its arsenal: Velociraptor, an open-source digital forensics and incident response app not previously tied to ransomware incidents.…

source https://go.theregister.com/feed/www.theregister.com/2025/10/10/ransomware_velociraptor/