Hypervisor Hangover: Persistence Mechanisms on ESXi

As FIN groups continue to execute fast-impact ransomware campaigns and nation-state APTs favor long-term infrastructure control, hypervisors have become the new high ground. This talk explores a set of stealthy, reliable persistence techniques targeting VMware ESXi,...

LockBit: A Threat Profile

Aliases   ABCD ransomware   LockBit 2.0    LockBit Black (3.0)   LockBit Green   LockBit 5.0 Get Threat Intel and Security Updates Delivered to Your Inbox. Name* First Last Business Email*   Profiling   Threat Actor Type: Ransomware-as-a-Service (RaaS) with...

The 99% Solution: MFA for Hypervisor Security

Hypervisor attacks are accelerating, and the cost is catastrophic. Recent ESXi ransomware attacks have cost organizations hundreds of millions in recovery. In some cases, a single ESXi breach has led to costs exceeding $400 million.   Ransomware targeting virtualized...

Protecting Your Most Vulnerable Assets from Ransomware

Why Hypervisor Security, Why Now? – Protecting Your Most Vulnerable Assets from Ransomware Quickly scan this map to see how ZeroLock® mitigates 100% of MITRE ATT&CK v17 ESXi TTPs when properly configured and fully deployed through a multilayered approach...

Scattered Spider: A Threat Profile

Aliases UNC3944 (Google Mandiant) The Com/The Community Octo Tempest (Microsoft) Oktapus (Group-IB) Muddled Libra (Palo Alto Unit 42) Scatter Swine (Okta) StarFraud Storm-0875 Get Threat Intel and Security Updates Delivered to Your Inbox. Name* First Last Business...