logo

Bert Blitzes Linux & Windows Systems

ID: d577f9c2-4e63-538c-8191-c0bc2656515c

STIX ID: report--d577f9c2-4e63-538c-8191-c0bc2656515c

Feed Name: Dark Reading

Threat Score
75/100

Date Published: 2025-07-07

Date Updated: 2026-04-21

Author: Jai Vijayan, Contributing Writer

...
...

Trend Micro reports on a fast, multiplatform ransomware called "Bert" (aka "Water Pombero") that leverages aggressive multithreading—up to 50 threads on Linux—to rapidly encrypt files, uses PowerShell loaders and privilege escalation on Windows, disables security controls, and can forcibly shut down VMware ESXi VMs to maximize disruption; victims have been observed across healthcare, event services, and technology sectors in multiple regions.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.