Warlock appears to be a customized derivative of the leaked LockBit 3.0 builder. [ https://www.trendmicro.com/en_us/research/25/h/warlock-ransomware.html ]