Linux version of TargetCompany ransomware focuses on VMware ESXi
Researchers have discovered a new Linux ransomware strain of the TargetCompany family that targets VMware ESXi installations and delivers and runs payloads via a customized shell script.
The TargetCompany ransomware operation, also known as Mallox, FARGO, and Tohnichi, first surfaced in June 2021 and has been concentrating on database attacks (MySQL, Oracle, and SQL Server) against businesses mostly located in Taiwan, South Korea, Thailand, and India.
The antivirus company Avast declared in February 2022 that a free decryption tool covering versions released up to that time was available. However, the gang resumed its usual activities by September, focusing on Microsoft SQL servers that were at risk of vulnerability and threatening victims with the release of stolen data over Telegr...