Tag: vmware esxi

2 Attack Reports | 0 Vulnerabilities

Attack reports

From emerging threat to top-tier ransomware-as-a-service: The evolution of INC ransomware

INC has evolved from an emerging ransomware-as-a-service operation into one of the most active groups in 2026, claiming over 800 victims since 2023. The disruption of LockBit and BlackCat's shutdown created opportunities for INC to expand as affiliates migrated. Both Windows and Linux/ESXi encrypto…
cobalt strike
encryption
ransomware-as-a-service
CVE-2023-3519
CVE-2023-48788
double-extortion
raas
CVE-2024-57727
lynx
CVE-2025-5777
inc
2026-06-17
data-leak-site
rust-based
sinobi
veeam-credential-dumping
vmware-esxi
Published: June 17, 2026
Linked vulnerabilities : CVE-2024-57727 (CVSS 7.5), CVE-2023-3519, CVE-2023-48788, CVE-2025-5777 (CVSS 9.3)
Downloadable IOCs: 22

TargetCompany’s Linux Variant Targets ESXi Environments

Since its discovery in 2021, TargetCompany has been evolving its techniques to circumvent security defenses employed by organizations; one such technique its use of a PowerShell script to bypass Antimalware Scan Interface (AMSI) and abuse of fully undetectable (FUD) obfuscator packers. A new varian…
ransomware
lockbit
execution
2024-06-06
vmware esxi
targetcompany
cloud security
vampire
Published: June 6, 2024
Downloadable IOCs: 3
Click here to see more Attack Reports