The Week in Ransomware - April 5th 2024 - Virtual Machines under Attack

This report summarizes multiple active ransomware and cybercrime incidents from early April 2024, highlighting attacks that targeted VMware ESXi virtual machines (causing major outages at Panera, Omni Hotels, and hosting provider IxMetro), a data breach at MarineMax, and several newly observed ransomware variants and IOCs (file extensions and ransom note names). It documents attacker TTPs like phishing using malicious OneNote attachments, notes that some attackers encrypted backups, and urges administrators to apply updates and tighten access controls on VM platforms.