Tag: hyper-v

2 Attack Reports | 0 Vulnerabilities

Attack reports

Kyber Ransomware Double Trouble: Windows and ESXi Attacks Explained

Kyber ransomware represents a significant threat through dual-platform deployment capabilities targeting VMware ESXi virtualization infrastructure and Windows file systems. During a March 2026 incident response engagement, two Kyber payloads were recovered from the same environment. The ESXi varian…
rust
cross-platform
esxi
chacha8
virtualization
vmware
hyper-v
2026-04-22
kyber
Published: April 22, 2026
Downloadable IOCs: 3

Evasion and Persistence via Hidden Hyper-V Virtual Machines

This investigation uncovered new tools and techniques used by the Curly COMrades threat actor to establish covert, long-term access to victim networks. The attackers exploited Hyper-V virtualization on compromised Windows 10 machines to create hidden remote operating environments. They deployed a m…
evasion
powershell
persistence
lateral movement
proxy
reverse shell
virtualization
2025-11-05
hyper-v
kerberos
alpine linux
curlcat
curlyshell
Published: November 5, 2025
Downloadable IOCs: 4
Click here to see more Attack Reports