The WarLock ransomware group, already linked to July's Microsoft SharePoint attacks, has been stepping up its attacks in recent weeks, a new report by Sophos says.