45,654 VMware ESXi servers reached End of Life on Oct. 15Security Affairs·Oct 17, 07:01 UTC · Oct 17, 2022Ransomware57
Now Abyss Locker also targets VMware ESXi serversSecurity Affairs·Jul 29, 20:01 UTC · Jul 29, 2023Ransomware57
Crooks exploit VMWare ESXi flaws to encrypt disks of VMsSecurity Affairs·Feb 2, 10:21 UTC · Feb 2, 2021RansomwareCVE-2019-5544CVE-2020-399260
New 'MichaelKors' Ransomware-as-a-Service Targeting Linux and VMware ESXi SystemsThe Hacker News·Jun 14, 13:32 UTC · Jun 14, 2023Ransomware in the wild60
New wave of ransomware attacks targeting VMware ESXi ServersSecurity Affairs·Feb 4, 13:11 UTC · Feb 4, 2023RansomwareCVE-2021-2197460
Italian ACN warns ransomware campaign targeting VMware ESXiSecurity Affairs·Feb 6, 08:23 UTC · Feb 6, 2023RansomwareCVE-2021-2197460
CISA adds VMware ESXi bug to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jul 30, 21:08 UTC · Jul 30, 2024Exploit / PoC in the wildCVE-2024-3708560
A new Linux version of TargetCompany ransomware targets VMware ESXi environmentsSecurity Affairs·Jun 6, 17:58 UTC · Jun 6, 2024Ransomware57
Black Basta ransomware supports encrypting VMware ESXi serversSecurity Affairs·Jun 8, 07:55 UTC · Jun 8, 2022Ransomware57
HelloKitty ransomware now targets VMware ESXi serversSecurity Affairs·Jul 15, 17:07 UTC · Jul 15, 2021Ransomware57
Ransomware gangs exploit VMware ESXi bug CVE-2024Security Affairs·Jul 29, 20:55 UTC · Jul 29, 2024RansomwareCVE-2024-37085CVE-2023-2825260
Royal Ransomware adds support for encrypting Linux, VMware ESXi systemsSecurity Affairs·Feb 6, 14:51 UTC · Feb 6, 2023Ransomware57
Experts analyze first LockBit ransomware for Linux and VMware ESXiSecurity Affairs·Jan 27, 09:48 UTC · Jan 27, 2022Ransomware57
Scattered Spider targets VMware ESXi in using social engineeringSecurity Affairs·Jul 28, 10:40 UTC · Jul 28, 2025Ransomware57
Thousands of unpatched VMware ESXi servers hit by ransomware via old bug (CVE-2021-21974)Help Net Security·Feb 8, 12:11 UTC · Feb 8, 2023RansomwareCVE-2021-2197460
Experts detailed a previously undetected VMware ESXi backdoorSecurity Affairs·Dec 13, 14:15 UTC · Dec 13, 2022MalwareCVE-2019-5544CVE-2020-399247
Leaked source code of Babuk ransomware used by 10 different ransomware families targeting VMware ESXiSecurity Affairs·May 12, 20:17 UTC · May 12, 2023Ransomware57
Vulnerability Spotlight: Multiple vulnerabilities in NVIDIA Windows GPU Display Driver, VMware ESXi, Workstation and FusionCisco Talos·Aug 5, 15:30 UTC · Aug 5, 2019Vulnerability in the wildCVE-2019-5521CVE-2019-5684CVE-2019-568560
Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming PatternThe Hacker News·May 24, 05:01 UTC · May 24, 2024Ransomware57
Babuk Source Code Sparks 9 Different Ransomware Strains Targeting VMware ESXi SystemsThe Hacker News·May 12, 05:21 UTC · May 12, 2023Ransomware57
A new variant of Cicada ransomware targets VMware ESXi systemsSecurity Affairs·Sep 2, 07:06 UTC · Sep 2, 2024Ransomware57
More than 18,500 ESXi servers still vulnerable to VMware bug behind initial ransomware spreeThe Record·Feb 14, 18:48 UTC · Feb 14, 2023RansomwareCVE-2021-2197460
Experts warn of Babuk Locker attacks with recently leaked ransomware builderSecurity Affairs·Jul 2, 11:45 UTC · Jul 2, 2021Ransomware57
Windows 10, Linux, iOS, Chrome and Many Others at Hacked Tianfu Cup 2021The Hacker News·Feb 19, 06:10 UTC · Feb 19, 2022Vulnerability42
ESXiArgs Ransomware Targets Publicly-Exposed ESXi OpenSLP ServersRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025RansomwareCVE-2021-21974CVE-2020-399260
Attackers use novel technique, malware to compromise hypervisors and virtual machinesHelp Net Security·Sep 30, 00:00 UTC · Sep 30, 2022Malware42
New Wave of Ransomware Attacks Exploiting VMware Bug to Target ESXi ServersThe Hacker News·Feb 7, 06:10 UTC · Feb 7, 2023RansomwareCVE-2021-2197460
Linux version of REvil ransomware targets ESXi VMSecurity Affairs·Jun 29, 13:24 UTC · Jun 29, 2021Ransomware57
AvosLocker ransomware targets Linux systems, including ESXi serversSecurity Affairs·Jan 11, 09:46 UTC · Jan 11, 2022Ransomware57
New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS AttacksThe Hacker News·Apr 27, 07:55 UTC · Apr 27, 2023VulnerabilityCVE-2023-2955247
New Luna ransomware targets Windows, Linux and ESXi systemsSecurity Affairs·Jul 20, 20:16 UTC · Jul 20, 2022Ransomware57
Ransom Cartel Ransomware: A Possible Connection With REvilPalo Alto Unit 42·Jun 5, 17:50 UTC · Jun 5, 2024Ransomware57
Experts found a bug in the Linux version of RansomHub ransomwareSecurity Affairs·Jun 22, 09:45 UTC · Jun 22, 2024Ransomware57
Ransomware attack on Johnson Controls may have exposed sensitive DHS dataSecurity Affairs·Oct 2, 05:22 UTC · Oct 2, 2023Ransomware57
FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help VictimsThe Hacker News·Jun 7, 15:29 UTC · Jun 7, 2024Ransomware57
The builder for Babuk Locker ransomware was leaked onlineSecurity Affairs·Jun 28, 10:36 UTC · Jun 28, 2021Ransomware57
RedAlert, LILITH, and 0mega, 3 new ransomware in the wildSecurity Affairs·Jul 15, 07:26 UTC · Jul 15, 2022Ransomware57
Dark Angels Team ransomware group hit Johnson ControlsSecurity Affairs·Sep 28, 13:11 UTC · Sep 28, 2023Ransomware57
Researchers Warn of New “Vect” RaaS VariantInfosecurity Magazine·Feb 3, 14:00 UTC · Feb 3, 2026Ransomware57