Ransomware threats/attacks to hypervisor platforms are real

[RolandK]

not sure if this has been brought up here, but i cannot remember and it cannot do harm to re-post :

https://www.bleepingcomputer.com/ne...attack-targets-vmware-esxi-servers-worldwide/
https://33hops.com/massive-esxi-ransomware-attack-2023.html
https://blog.checkpoint.com/2023/02/06/massive-ransomware-attack-targets-vmware-esxi-servers/
https://www.computerweekly.com/de/n...are-Weltweite-Angriffe-auf-VMware-ESXi-Server
https://www.zdnet.de/88407046/ransomware-befaellt-3-800-vmware-esxi-server/

safeguards:

- be aware of that
- always keep your systems/services up to date
- have daily backups at a safe/secure place
- don't expose ports unnecessarily to the outside world
- think twice when you are on the internet
- use a firewall
- use vpn

 

[Dunuin]

PVEs also got ransomwared in the past: https://forum.proxmox.com/threads/file-encrypting-trojan.99586/

Would be really bad if such a remote code execution exploit would be found in PVE. From what I'm reading here in this forum half of the hosts are still running 6.X or even worse.