RansomHub ransomware variants now targeting VMware ESXi VMs on Linux systems

RansomHub ransomware variants now targeting VMware ESXi VMs on Linux systems

The RansomHub ransomware operation, launched in February 2024, targets VMware ESXi environments in enterprise attacks. It is a ransomware-as-a-service (RaaS) operation linked to other ransomware groups and has affected over 45 victims in 18 countries. A specialized ESXi variant of RansomHub was discovered by Recorded Future in April 2024, showing overlaps with the now-defunct Knight … Read more