Click here to download all references as Bib-File.
| 2023-02-03 ⋅ Bleeping Computer ⋅ Massive ESXiArgs ransomware attack targets VMware ESXi servers worldwide ESXiArgs |
| 2023-02-03 ⋅ OVHcloud ⋅ Ransomware targeting VMware ESXi ESXiArgs |
| 2022-11-21 ⋅ vmware ⋅ Threat Analysis: Active C2 Discovery Using Protocol Emulation Part4 (Dacls, aka MATA) Dacls |
| 2022-11-14 ⋅ vmware ⋅ BATLOADER: The Evasive Downloader Malware BATLOADER |
| 2022-10-25 ⋅ VMware Threat Analysis Unit ⋅ Tracking the entire iceberg: long-term APT malware C2 protocol emulation and scanning ShadowPad Winnti |
| 2022-10-20 ⋅ Fortinet ⋅ Mirai, RAR1Ransom, and GuardMiner – Multiple Malware Campaigns Target VMware Vulnerability Mirai |
| 2022-10-15 ⋅ vmware ⋅ LockBit 3.0 Ransomware Unlocked LockBit |
| 2022-10-03 ⋅ vmware ⋅ Emotet Exposed: A Look Inside the Cybercriminal Supply Chain Emotet |
| 2022-09-28 ⋅ vmware ⋅ ESXi-Targeting Ransomware: The Threats That Are After Your Virtual Machines (Part 1) Avoslocker Babuk Black Basta BlackCat BlackMatter Conti DarkSide HelloKitty Hive LockBit Luna RansomEXX RedAlert Ransomware REvil |
| 2022-09-20 ⋅ vmware ⋅ Threat Research: New Method of Volume Shadow Backup Deletion Seen in Recent Ransomware |
| 2022-09-20 ⋅ vmware ⋅ Threat Report: Illuminating Volume Shadow Deletion Conti HelloKitty |
| 2022-09-19 ⋅ vmware ⋅ The Evolution of the Chromeloader Malware Choziosi |
| 2022-08-19 ⋅ vmware ⋅ How to Replicate Emotet Lateral Movement Emotet |
| 2022-07-22 ⋅ vmware ⋅ How Push Notifications are Abused to Deliver Fraudulent Links |
| 2022-07-05 ⋅ Bleeping Computer ⋅ New RedAlert Ransomware targets Windows, Linux VMware ESXi servers RedAlert Ransomware |
| 2022-06-29 ⋅ vmware ⋅ Lateral Movement in the Real World: A Quantitative Analysis |
| 2022-05-25 ⋅ vmware ⋅ Emotet Config Redux Emotet |
| 2022-05-16 ⋅ vmware ⋅ Emotet Moves to 64 bit and Updates its Loader Emotet |
| 2022-04-27 ⋅ Sentinel LABS ⋅ LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility Cobalt Strike LockBit BRONZE STARLIGHT |
| 2022-04-27 ⋅ Sentinel LABS ⋅ LockBit Ransomware Side-loads Cobalt Strike Beacon with Legitimate VMware Utility Cobalt Strike LockBit |