New Ransomware Variant “Eldorado” Unleashed, Focused on VMware ESXi Systems
A new ransomware-as-a-service called Eldorado has been targeting Windows and VMware ESXi environments in the US since March, primarily in…
Tag: ESXi
SecurityWeek: VMware addresses critical vulnerabilities allowing sandbox escape in ESXi
VMware has recently addressed critical vulnerabilities in its ESXi virtualization platform that could allow attackers to escape from the sandboxed…
VMware ESXi and Windows Infected by Eldorado Ransomware, Reports Spiceworks
A cybersecurity research team has identified a new ransomware called Eldorado that is targeting organizations globally. This ransomware is operated…
New Eldorado ransomware now targeting Windows and VMware ESXi VMs
In March, a new ransomware called Eldorado, operating as a service (RaaS), has targeted victims in the United States across…
New Eldorado ransomware now seeking out Windows and VMware ESXi virtual machines
In March, a new ransomware called Eldorado emerged, targeting victims in the US across various industries. The cybercriminals behind Eldorado…
Hackers Utilize Linux Rootkits to Conceal Themselves on VMware ESXi Virtual Machines in UNC3886
In a recent cybersecurity threat, hackers identified as UNC3886 have been using Linux rootkits to conceal their presence on VMware…
Attackers can bypass authentication on VMware ESXi due to vulnerability
VMware has disclosed three critical vulnerabilities in its ESXi hypervisor that could allow attackers to bypass authentication mechanisms. These vulnerabilities,…
RansomHub for Linux poses a security threat to VMware ESXi
A recent report by BleepingComputer has revealed that a new Linux encryptor was used in attacks against VMware ESXi environments…
RansomHub ransomware variants now targeting VMware ESXi VMs on Linux systems
The RansomHub ransomware operation, launched in February 2024, targets VMware ESXi environments in enterprise attacks. It is a ransomware-as-a-service (RaaS)…
Hackers Employ Linux Rootkits to Conceal Themselves on VMware ESXi Virtual Machines in UNC3886
A Chinese threat actor known as UNC3886 has been using open source rootkits Reptile and Medusa to hide on VMware…