logo

Babuk: Biting off More than they Could Chew by Aiming to Encrypt VM and *nix Systems?

ID: 966237b0-5af1-5302-bd73-a26cac5ea889

STIX ID: report--966237b0-5af1-5302-bd73-a26cac5ea889

Feed Name: McAfee Labs Blog

Threat Score
78/100

Date Published: 2021-07-29

Date Updated: 2026-04-28

Author: Thibault Seret

...
...

This McAfee report analyzes the Babuk ransomware family, noting affiliates developing cross-platform Go binaries targeting Linux/UNIX and ESXi systems, widespread coding errors that can prevent file recovery, and an observed shift from pure encryption to data theft and extortion; it also outlines common entry vectors (phishing, public-facing exploits, stolen/valid accounts), recommended detection and protection measures, and distribution of IoCs via vendor telemetry.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.