DarkBit Hackers Target VMware ESXi Servers to Deploy Ransomware and Encrypt VMDK Files

DarkBit Hackers Attacking Vmware ESXi Servers to Deploy Ransomware and Encrypt VMDK Files | #ransomware | #cybercrime - National Cyber Security Consulting

A newly discovered ransomware campaign has targeted enterprise VMware ESXi environments with military precision, deploying custom-built encryption tools that specifically hunt for virtual machine disk files across VMFS datastores.  Security researchers have successfully reverse-engineered the attack methodology and developed breakthrough decryption techniques, revealing critical vulnerabilities in the threat actors’ cryptographic implementation …

DarkBit Hackers Target VMware ESXi Servers to Deploy Ransomware and Encrypt VMDK Files

A sophisticated ransomware attack by a previously unknown cybercriminal group called “DarkBit” has targeted a major organization’s VMware ESXi infrastructure, encrypting critical virtual machine files and raising concerns about potential state-sponsored cyber warfare. The incident, which occurred following geopolitical tensions in late January 2023, demonstrates how ransomware groups are increasingly targeting enterprise virtualization platforms…