RansomHouse gang automates VMware ESXi attacks with new MrAgent tool
ID: c3986d4d-39f3-5037-a027-4e02e964fdfa
STIX ID: report--c3986d4d-39f3-5037-a027-4e02e964fdfa
Feed Name: Bleeping Computer
Threat Score
RansomHouse developed 'MrAgent', an automated tool that targets VMware ESXi hypervisors to disable firewalls, execute commands, and deploy ransomware across multiple managed virtual machines; Trellix and partner researchers observed Linux and Windows variants and warn the tool increases attack impact by automating hypervisor-wide encryption and evasion steps.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.