Ransomwarecritical
‘Massive’ new ESXiArgs ransomware campaign has compromised thousands of victims
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-21974 | OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability | 8.8 | 45% | PoC |
From the original article
2 min read at therecord.media
European cybersecurity authorities are warning of “massive active network exploitation” of an almost 2-year-old VMWare ESXi vulnerability by ransomware actors. The campaign is being named ESXiArgs because the ransomware creates an additional file with the extension . args after encrypting a document.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.