GOLD SALEM tradecraft for deploying Warlock ransomware 10:00 - 11 Dec 2025 news.sophos.com Analysis of the tradecraft evolution across 6 months and 11 incidents https://news.sophos.com/en-us/2025/12/11/gold-salem-tradecraft-for-deploying-warlock-ransomware/