Tag: esxi
4 articles
Ransomware Targets Hypervisor Layer via Legitimate VMware Interfaces
In a shocking attack, hackers destroyed an organization's entire virtualization infrastructure - including four ESXi hosts and all connected backups - in just 10 days, using legitimate VMware interfaces to carry out the devastating blow. The culprits, known as BlackNevas, pulled off a management-plane compromise, executing malicious actions through authentic VMware management channels.
Misconfigured Virtualization Environments Expose Administrative Access Risks
Attackers can easily gain administrative access to virtualization environments through misconfigured monitoring servers and reused credentials, putting entire estates at risk of ransomware attacks. Even without a complex VM escape, hackers can take advantage of exposed credentials and overprivileged monitoring identities to wreak havoc.
VECT 2.0 Ransomware Exposes Flaw, Irreparably Destroys Large Files
Meet VECT 2.0, a malicious ransomware that doesn't just hold your files hostage - it destroys them, leaving you with no way to recover even if you pay up. This cunning malware wreaks havoc on large files across Windows, Linux, and ESXi hosts, causing irreversible damage.
Kyber Ransomware Targets Windows, VMware with Post-Quantum Encryption
Meet the Kyber Ransomware, a potent threat that targets both Windows and VMware environments with cutting-edge, post-quantum encryption. This sophisticated malware has been found to strike multiple systems at once, as seen in a March 2026 incident where two variants were deployed on the same network.