Unveiling Abyss Locker: The Rapid Rise of a Menacing Ransomware Threat

Abyss Locker is a recently observed ransomware operation (linked to HelloKitty) that targets Windows and Linux systems including VMware ESXi via a custom Linux encryptor; the report details its technical behavior — terminating services/processes, deleting shadow copies, creating a mutex, excluding certain files/folders/extensions, using Salsa20 encryption across multiple threads, dropping ransom notes and changing wallpapers — and provides IOCs and MITRE TTP mappings for detection and response.