VMware ESXi hypervisors are the subject of attacks by the well-known cybercrime gang Scattered Spider that target the North American retail, airline, and transportation industries.
The fundamental strategies employed by the gang have not changed and do not depend on software exploits. According to a thorough examination by Google’s Mandiant team, they instead employ a tried-and-true strategy that revolves upon phone calls to an IT help desk.
The actors are aggressive, resourceful, and especially adept at circumventing even well-established security measures through social engineering. They target an organization’s most important systems and data using targeted, campaign-driven attacks rather than opportunistic ones.
The threat actors, also known as 0ktapus, Muddled Libra, Octo Tempest, and UNC3944, have a history of using sophisticated social engineering techniques to gain initial access to victim environments read more about AWS EKS Security Best PracticesScattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.