New Linux Variant of Play Ransomware Targeting VMware ESXi Systems

A new Linux variant of the Play ransomware that targets VMware ESXi environments, marking a shift from its previous focus on Windows systems. This ransomware employs advanced evasion techniques and is linked to the Prolific Puma group, enhancing its operational capabilities. It encrypts critical files and disrupts business operations by leaving ransom notes, prompting organizations to strengthen their security measures, including regular updates, access controls, and offline backups.