Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail Server
Last week, SmarterTools verified that an unpatched SmarterMail instance was used by the Warlock (also known as Storm-2603) ransomware gang to compromise its network.
According to Derek Curtis, the company's chief commercial officer, the incident occurred on January 29, 2026, when a mail server that had not been updated to the most recent version was compromised.
We had about 30 servers/VMs with SmarterMail installed across our network before the hack, Curtis said. Regretfully, we were not aware of one employee-created virtual machine that was not being updated. The breach resulted from the penetration of that mail server.
However, SmarterTools stressed that no business applications or account data were impacted or compromised read more about Warlock Ransomware Breaches SmarterToo...