Warlock ransomware breached SmarterTools via unpatched SmarterMail, exploiting critical flaws to access Windows systems and deploy encryption payloads

Warlock ransomware breached SmarterTools via unpatched SmarterMail, exploiting critical flaws to access Windows systems and deploy encryption payloads

SmarterTools confirmed last week that the Warlock ransomware gang breached its network after compromising an email system, but did not impact business applications or account data.

The Warlock ransomware group (also known as Storm-2603) has compromised the network of SmarterTools by exploiting an unpatched instance of SmarterMail. The incident occurred on January 29, 2026, when a mail server that was not updated to the latest version was compromised, according to Derek Curtis, the Chief Commercial Officer of the company. Before the breach, SmarterTools had approximately 30 servers/VMs.

SmarterTools confirmed last week that the Warlock (aka Storm-2603) ransomware gang breached its network by exploiting an unpatched SmarterMail instance. The incident took place on January 29, 2026, when a mail server that was not updated to the latest version was compromised, the company's Chief Commercial Officer, Derek Curtis, said. "Prior to the breach, we had approximately 30 servers/VMs

SmarterTools confirmed last week that the Warlock ransomware gang breached its network after compromising an email system, but did not impact business applications or account data. [...]

American software company SmarterTools confirmed being struck with ransomware, but said the attack did not affect its business applications, or account data.

Just one neglected server was enough to suffer a ransomware infection but this time, the damage was minimal.

SmarterTools confirmed last week that the Warlock ransomware gang breached its network after compromising an email system, but did not impact business applications or account data.

Warlock ransomware has breached SmarterTools by exploiting an unpatched SmarterMail server, highlighting the risks of delayed security updates.

account data were impacted or compromised read more about Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail Server

SmarterTools, the company behind the popular Microsoft Exchange alternative SmarterMail, has been breached by a ransomware-wielding group that leveraged a recently fixed vulnerability in that solution. How did the SmarterTools breach happen? Derek Curtis, the firm’s Chief Operating Officer, said that the breach happened on January 29, 2026. “Prior to the breach, we had approximately 30 servers/VMs with SmarterMail installed throughout our network. Unfortunately, we were unaware of one VM, set up by an employee, …

The ransomware group breached SmarterTools through a vulnerability in the company's own SmarterMail product.

En exploitant une faille dans le logiciel SmarterMail, les pirates du gang Warlock sont parvenus à s'introduire sur les serveurs de l'éditeur SmarterTools.

SmarterTools confirmed last week that the Warlock ransomware gang breached its network after compromising an email system, but did not impact business applications or account data.

SmarterTools confirmed last week that the Warlock ransomware gang breached its network after compromising an email system, but did not impact business applications or account data.

SmarterTools confirmed last week that the Warlock (aka Storm-2603) ransomware gang breached its network by exploiting an unpatched SmarterMail instance.