RansomHouse gang automates VMware ESXi attacks with new MrAgent tool

RansomHouse gang automates VMware ESXi attacks with new MrAgent tool


The RansomHouse ransomware operation has created a new tool named ‘MrAgent’ that automates the deployment of its data encrypter across multiple VMware ESXi hypervisors.

RansomHouse is a ransomware-as-a-service (RaaS) operation that emerged in December 2021 and is using double extortion tactics. In May 2022, the operation set up a dedicated victim extortion page on the dark web.

Although the RansomHouse gang was not as active as more infamous groups like LockBit, ALPHV/Blackcat, Play,…



Source link