Hackers exploit VMware vulnerability that gives them hypervisor admin:

bleepingcomputer.com/news/microsoft/microsoft-ransomware-gangs-exploit-vmware-esxi-auth-bypass-in-attacks/

Credibility A−

Jul 29 24

Microsoft: Ransomware gangs exploit VMware ESXi auth bypass in attacks: Microsoft warned today that ransomware gangs are actively exploiting a VMware ESXi ...

bleepingcomputer.com/news/security/cisa-warns-of-vmware-esxi-bug-exploited-in-ransomware-attacks/

Jul 30 24

CISA warns of VMware ESXi bug exploited in ransomware attacks: CISA has ordered U.S. Federal Civilian Executive Branch (FCEB) agencies to secure their servers ...

dlvr.it Jul 30 24

Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability

theregister.com/2024/07/30/make_me_admin_esxi_flaw/

Similar to This

bleepingcomputer.com/news/security/cisa-vmware-esxi-flaw-now-exploited-in-ransomware-attacks/

Credibility A−

Feb 04

CISA: VMware ESXi flaw now exploited in ransomware attacks: CISA confirmed on Wednesday that ransomware gangs have begun exploiting a high-severity VMware ESXi ...

2 similar articles

dlvr.it Dec 09 25

Researchers spot 700 percent increase in hypervisor ransomware attacks: : Get your Hyper-V and VMware ESXi setups in order, people

theregister.com/2025/12/09/hypervisor_ransomware_attacks_increasing/

TechSpot

techspot.com/news/109675-lockbit-ransomware-returns-targeting-windows-linux-vmware-esxi.html

Sep 30 25

LockBit ransomware returns, targeting Windows, Linux, and VMware ESXi: Trend Micro researchers are warning that the criminal group behind LockBit has released a ...

4 similar articles

bleepingcomputer.com/news/security/scattered-spider-is-running-a-vmware-esxi-hacking-spree/

Jul 27 25

Scattered Spider is running a VMware ESXi hacking spree: Scattered Spider hackers have been aggressively targeting virtualized environments by attacking VMware ...

4 2

bleepingcomputer.com/news/security/fake-keepass-password-manager-leads-to-esxi-ransomware-attack/

May 19 25

Fake KeePass password manager leads to ESXi ransomware attack: Threat actors have been distributing trojanized versions of the KeePass password manager for at ...

pcmag.com/news/microsoft-spots-ransomware-groups-abusing-zero-day-flaw

2 1

pcmag.com

Jul 30 24

Microsoft Spots Ransomware Groups Abusing Zero-Day Flaw: The flaw affects VMware's ESXi hypervisor product, enabling high-profile ransomware gangs to steal data ...

bleepingcomputer.com/news/security/new-eldorado-ransomware-targets-windows-vmware-esxi-vms/

Jul 05 24

New Eldorado ransomware targets Windows, VMware ESXi VMs: A new ransomware-as-a-service (RaaS) called Eldorado emerged in March and comes with locker variants ...

bleepingcomputer.com/news/security/linux-version-of-ransomhub-ransomware-targets-vmware-esxi-vms/

Jun 20 24

Linux version of RansomHub ransomware targets VMware ESXi VMs: The RansomHub ransomware operation is using a Linux encryptor designed specifically to encrypt ...

1 similar article

bleepingcomputer.com/news/security/ransomhouse-gang-automates-vmware-esxi-attacks-with-new-mragent-tool/

Feb 15 24

RansomHouse gang automates VMware ESXi attacks with new MrAgent tool: The RansomHouse ransomware operation has created a new tool named 'MrAgent' ...

bleepingcomputer.com/news/security/babuk-code-used-by-9-ransomware-gangs-to-encrypt-vmware-esxi-servers/

May 11 23

Babuk code used by 9 ransomware gangs to encrypt VMWare ESXi servers: An increasing number of ransomware operations are adopting the leaked Babuk ransomware ...

ZDNET

zdnet.com/article/ransomware-has-hit-3800-servers-but-cisa-says-this-tool-might-help/

Feb 09 23

Ransomware has hit 3,800 servers, but CISA says this tool might help: Organizations affected by the ESXiArgs ransomware for VMware ESXI servers can use an ...

theregister.com/2023/02/08/esxiargs_ransomware_recovery_script/

dlvr.it Feb 08 23

Among the thousands of ESXiArgs ransomware victim orgs? FBI and CISA to the rescue

arstechnica.com/information-technology/2023/02/hackers-are-mass-infecting-servers-worldwide-by-exploiting-a-patched-hole/

Ars Technica

Feb 08 23

Hackers are mass infecting servers worldwide by exploiting a patched hole: Servers running unpatched versions of ESXi are sitting ducks for ESXiArgs attacks.

1 similar article

Axios

B+

Feb 07 23

Ransomware targets two-year-old flaw in VMware cloud product: U.S., Italian, French and other government officials are monitoring the situation.

axios.com/2023/02/07/vmware-server-attacks

2 similar articles

bleepingcomputer.com/news/security/massive-esxiargs-ransomware-attack-targets-vmware-esxi-servers-worldwide/

Feb 03 23

Massive ESXiArgs ransomware attack targets VMware ESXi servers worldwide: Admins, hosting providers, and the French Computer Emergency Response Team (CERT-FR) ...

bleepingcomputer.com/news/security/vmware-warns-admins-to-patch-esxi-servers-disable-openslp-service/

Feb 06 23

VMware warns admins to patch ESXi servers, disable OpenSLP service: VMware warned customers today to install the latest security updates and disable the OpenSLP ...

bleepingcomputer.com/news/security/new-nevada-ransomware-targets-windows-and-vmware-esxi-systems/

Feb 01 23

New Nevada Ransomware targets Windows and VMware ESXi systems: A relatively new ransomware operation known as Nevada seems to grow its capabilities quickly as ...

1 similar article

bleepingcomputer.com/news/security/new-redalert-ransomware-targets-windows-linux-vmware-esxi-servers/

Jul 06 22

New RedAlert Ransomware targets Windows, Linux VMware ESXi servers: A new ransomware operation called RedAlert, or N13V, encrypts both Windows and Linux VMWare ...

bleepingcomputer.com/news/security/linux-version-of-black-basta-ransomware-targets-vmware-esxi-servers/

Jun 07 22

Linux version of Black Basta ransomware targets VMware ESXi servers: Black Basta is the latest ransomware gang to add support for encrypting VMware ESXi virtual ...

theregister.com/2022/05/26/vmware-cheers-ransomware/

dlvr.it May 26 22

Cheers ransomware hits VMware ESXi systems: Now we can say extortionware has jumped the shark