CISA Releases Recovery Tool for VMware Ransomware Victims
A new script has been released by the US Cybersecurity and Infrastructure Security Agency (CISA) to aid ransomware victims in recovering any VMware virtual machines (VMs) affected by a recent worldwide attack.
Based on a Monday "internet-wide" scanning attempt, ransomware payment tracker Ransomwhere believed there were 3800 victims. It claimed that four payments totaling $88,000 had been paid, however this certainly understates the size of the effort.
According to early reports from national CERTs, the threat actors responsible for it are using CVE-2021-21974 as a backdoor to execute remote code on VMware's ESXi hypervisors by causing a heap-overflow vulnerability in OpenSLP read the complete article CISA Releases Recovery Tool for VMware Ransomware Victims.
With ReconBee.com St...