New VanHelsing ransomware targets Windows, ARM, ESXi systems
VanHelsing is a recently discovered multi-platform ransomware-as-a-service (RaaS) business that targets Linux, Windows, BSD, ARM, and ESXi computers.
On March 7, VanHelsing was originally advertised on underground cybercrime platforms, giving seasoned affiliates a free pass to sign up while requiring a $5,000 payment from less seasoned threat actors.
CYFIRMA initially reported the new ransomware operation late last week, but Check Point Research conducted a more thorough investigation that was released Tuesday. VanHelsing is a Russian cybercrime initiative that prohibits targeting systems in Commonwealth of Independent States (CIS) nations, according to Check Point's experts.
Operators receive 20% of the ransom money, while affiliates are permitted to keep 80%. An automated escro...