Reading Time: 3 Minutes

Targeting Vmware ESXi virtual machines

Royal Ransomware is the latest ransomware operation to support the encryption of Linux devices, specifically targeting VMware ESXi virtual machines.
The Linux Royal Ransomware variant was discovered by the Equinix Threat Analysis Center and is executed using the command line.

It comes with support for multiple flags that allow the ransomware operators to control the encryption process. The ransomware appends the “.royal_u” extension to encrypted files on the VM.

Detection score on VirusTotal

Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: [email protected]

Source: bleepingcomputer.com