Censys in the News: ESXiArgs Ransomware Coverage

The Censys research team tracked an active ESXiArgs ransomware campaign against VMware ESXi servers beginning in early February, observing a global outbreak (peak ~3,551 infected hosts), visible ransom pages and bitcoin addresses, evidence of payments tracking, and attacker changes that rendered a CISA recovery tool ineffective; Censys published a dashboard and findings that were widely cited in industry press.