Broken by Design: How VECT 2.0 Ransomware Becomes a Permanent Data Wiper

Check Point Research found that VECT 2.0—advertised as cross-platform ransomware for Windows, Linux, and ESXi—is fundamentally flawed: a critical encryption implementation bug discards decryption nonces for files over ~128 KB, turning the malware into a destructive wiper that irrecoverably destroys large enterprise assets (VM disks, databases, backups); despite being broken today, the malware's aggressive distribution infrastructure (including TeamPCP) means a corrected, functional variant could pose a widespread high-impact threat in the future.