Novel TargetCompany Ransomware Linux Variant Now Attacks ESXi

Threat Advisories

Novel TargetCompany Ransomware Linux Variant Now Attacks ESXi

Summary:

The TargetCompany ransomware group has developed a new Linux variant using a custom shell script for payload delivery and execution, targeting VMWare ESXi environments to increase disruption and ransom payment chances. This variant exfiltrates victim data to two servers and is part of a broader campaign, with significant activity in Taiwan, India, Thailand, and South Korea. Continuous evolution of their techniques highlights the need for robust cybersecurity measures.
 

Threat Level – Red | Attack Report

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.