This dangerous new Linux malware is going after VMware systems with multiple extortion attempts
Cybersecurity researchers from Trend Micro recently found a Linux variant of the dreaded Play ransomware strain targeting VMWare ESXi environments. In a technical breakdown, Trend Micro’s Threat Hunting team said this was the first time Play was seen targeting ESXi environments, and it could be that the criminals are broadening their attacks across the Linux platform, giving them an expanded victim pool and more successful ransom negotiations. Play was first spotted more than two years ago, and since then it became popular for its double-extortion tactics, evasion techniques, custom-built tools, and a “substantial impact” on companies in Latin America, the researchers explained. Prolific Puma and Revolver Rabbit Businesses usually use VMWare’s ESXi instances for virtual machines, where they host critical applications, data, and integrated backup solutions. By targeting these endpoints, Play’s operators could reduce the chances of the victim recovering any encrypted data. Therefor...