Ransomware Rebrand: APT INC Strikes Fear into VMware ESXi Servers

The SEXi ransomware gang, notorious for attacking VMware ESXi servers, has rebranded as APT INC. These cybercriminals now use Babuk and LockBit 3 encryptors to wreak havoc on organizations. Despite the rebrand, their focus remains on targeting VMware ESXi servers, leaving virtual machines encrypted and…

Hot Take:

In a bold move reminiscent of a movie villain’s name change, the SEXi ransomware operation has rebranded as APT INC, but they’re still the same cybercriminals in different attire. It’s like Darth Vader asking you to call him Mr. Smith. The plot thickens with new attacks on VMware ESXi servers using Babuk and LockBit 3 encryptors. Beware, they’re not just targeting your data, they’re coming for your virtual machines!

Key Points:

  • SEXi ransomware rebrands as APT INC.
  • Targets VMware ESXi servers using Babuk and LockBit 3 encryptors.
  • Infamous for a major attack on Chilean hosting provider IxMetro Powerhost.
  • Ransom demands range from tens of thousands to millions.
  • No known weaknesses in Babuk and LockBit 3 encryptors for file recovery.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here