Hypervisor Jackpotting, Part 2: eCrime Actors Increase Targeting of ESXi Servers with Ransomware
Tags
attack-pattern: Data Direct Email Addresses - T1589.002 Python - T1059.006 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Vulnerabilities - T1588.006 Hypervisor - T1062 Valid Accounts - T1078 Valid Accounts
Show in Graph
Common Information
Type Value
UUID 703d4aba-79ed-42dd-bec3-a51059b032f5
Fingerprint 37328c3f15058255
Analysis status DONE
Considered CTI value 1
Text language
Published Nov. 7, 2024, midnight
Added to db Nov. 12, 2024, 11:51 a.m.
Last updated Nov. 12, 2024, 11:51 a.m.
Headline Hypervisor Jackpotting, Part 2: eCrime Actors Increase Targeting of ESXi Servers with Ransomware
Title Hypervisor Jackpotting, Part 2: eCrime Actors Increase Targeting of ESXi Servers with Ransomware
Detected Hints/Tags/Attributes 57/1/4
Source URLs
Redirection Url
Details Source https://www.crowdstrike.com/en-us/blog/hypervisor-jackpotting-ecrime-actors-increase-targeting-of-esxi-servers/
URL Provider
Details Provider Source level domain
Details crowdstrike.com www.crowdstrike.com
Attributes
Details Type #Events CTI Value
Details CVE 22 
cve-2021-21985
Details File 140 
files.txt
Details File 1 
recover_your_data.txt
Details File 1 
rhkrc-readme.txt