A large-scale attack has hit various IT infrastructures in Europe. After some in-depth analysis, it has emerged that it is specifically targeting outdated VMware ESXi servers. This is a vulnerability that has been known for some time and has still not been patched to the latest version by some operators.
Anyone who has not yet fixed this vulnerability will certainly become a target for an attack if they have not already done so. If the attack has already taken place, you are faced with encrypted operating systems. The cyber gang BlackBasta claimed responsibility for the attack.
There are now several thousand infected systems in several countries, including France, Italy, Finland, the USA and Canada.
If you fall victim to the attack, all systems must be restored to an old version. This should certainly be done in isolation so as not to be caught by the attack again.
Source: Sunshine