Attackers used PHP2Shell and a Check Point zero-day to reach VMware ESXi servers and run the destroy_v6 wiper between October 30 and November 4, 2026.
Check Point gateways hacked via PHP2Shell, wiper wipes VMware ESXi servers

Virtual Machine News Platform
