Click here to download all references as Bib-File.
| 2022-02-25 ⋅ vmware ⋅ AvosLocker – Modern Linux Ransomware Threats Avoslocker |
| 2022-02-17 ⋅ SentinelOne ⋅ Log4j2 In The Wild | Iranian-Aligned Threat Actor “TunnelVision” Actively Exploiting VMware Horizon APT35 |
| 2022-02-09 ⋅ vmware ⋅ Exposing Malware in Linux-Based Multi-Cloud Environments ACBackdoor BlackMatter DarkSide Erebus HelloKitty Kinsing PLEAD QNAPCrypt RansomEXX REvil Sysrv-hello TeamTNT Vermilion Strike Cobalt Strike |
| 2022-02-07 ⋅ vmware ⋅ Emotet Is Not Dead (Yet) – Part 2 Emotet |
| 2022-01-27 ⋅ vmware ⋅ BlackSun Ransomware – The Dark Side of PowerShell BlackSun |
| 2022-01-24 ⋅ Trend Micro ⋅ Analysis and Impact of LockBit Ransomware’s First Linux and VMware ESXi Variant LockBit LockBit |
| 2022-01-21 ⋅ vmware ⋅ Emotet Is Not Dead (Yet) Emotet |
| 2022-01-20 ⋅ Morphisec ⋅ Log4j Exploit Hits Again: Vulnerable VMWare Horizon Servers at Risk Cobalt Strike |
| 2022-01-17 ⋅ Cybleinc ⋅ AvosLocker Ransomware Linux Version Targets VMware ESXi Servers Avoslocker AvosLocker |
| 2022-01-15 ⋅ Huntress Labs ⋅ Threat Advisory: VMware Horizon Servers Actively Being Hit With Cobalt Strike (by DEV-0401) Cobalt Strike |
| 2022-01-11 ⋅ Twitter (@cglyer) ⋅ Thread on DEV-0401, a china based ransomware operator exploiting VMware Horizon with log4shell and deploying NightSky ransomware Cobalt Strike NightSky |
| 2021-12-23 ⋅ vmware ⋅ Introducing DARTH: Distributed Analysis for Research and Threat Hunting |
| 2021-12-03 ⋅ vmware ⋅ TigerRAT – Advanced Adversaries on the Prowl Tiger RAT |
| 2021-11-16 ⋅ vmware ⋅ Monitoring Winnti 4.0 C2 Servers for Two Years Winnti |
| 2021-11-11 ⋅ vmware ⋅ Research Recap: How To Automate Malware Campaign Detection With Telemetry Peak Analyzer Phorpiex QakBot |
| 2021-09-21 ⋅ vmware ⋅ VMSA-2021-0020: What You Need to Know (CVE-2021-22005) |
| 2021-08-05 ⋅ Bleeping Computer ⋅ Linux version of BlackMatter ransomware targets VMware ESXi servers BlackMatter |
| 2021-07-26 ⋅ vmware ⋅ Hunting IcedID and unpacking automation with Qiling IcedID |
| 2021-07-15 ⋅ Bleeping Computer ⋅ Linux version of HelloKitty ransomware targets VMware ESXi servers HelloKitty |
| 2021-07-08 ⋅ vmware ⋅ IcedID: Analysis and Detection IcedID |