Tag: legitimate interface abuse

Ransomware Targets Hypervisor Layer via Legitimate VMware Interfaces

In a shocking attack, hackers destroyed an organization's entire virtualization infrastructure - including four ESXi hosts and all connected backups - in just 10 days, using legitimate VMware interfaces to carry out the devastating blow. The culprits, known as BlackNevas, pulled off a management-plane compromise, executing malicious actions through authentic VMware management channels.