How the Grinch Stole ESXi: A Scattered Spider Threat Actor Round- Up

Scattered Spider may not live on Mount Crumpit, but their playbook for stealing Christmas—and your virtual infrastructure—would make even the Grinch proud. Join Joseph Comps, Threat Intelligence Analyst at Vali Cyber, for a deep dive into one of the most destructive...

Presentation: B-Sides NYC

The intricate architecture of hypervisors, while providing remarkable flexibility and scalability for enterprise-level operations, also represents one of the most critical under-protected attack surfaces existing today. This concurrently introduces significant...

ATT&CK v17 and the Increasingly Targeted ESXi Attack Surface

As enterprise virtualization scales, hypervisors like VMware ESXi have become critical—and increasingly exploited—attack surfaces. High-profile breaches such as Scattered Spider, the MGM Resorts ($110M) incident, and the Johnson Controls ($51M) breach demonstrate the...

Hypervisor Hangover: Persistence Mechanisms on ESXi

As FIN groups continue to execute fast-impact ransomware campaigns and nation-state APTs favor long-term infrastructure control, hypervisors have become the new high ground. This talk explores a set of stealthy, reliable persistence techniques targeting VMware ESXi,...