Linux variants of the TargetCompany ransomware, known also as FARGO, Mallox, and Tohnichi, have started targeting VMware ESXi platforms, according to a report from BleepingComputer.
This attack campaign, linked to an affiliate of TargetCompany ransomware referred to as “vampire,” known for previous breaches on Microsoft SQL Servers, entails deploying a specialized shell script. This script secures advanced user rights and verifies the creation of a TargetInfo.txt file, which collects specific details about the victims. The ransomware then commences encrypting files tied to VMware environments. Subsequently, a ransom note appears that lays out the payment demands, followed by the eradication of the TargetCompany for Linux ransomware through the shell script command ‘rm -f x’, as uncovered by Trend Micro researchers.
Further research into these recent ransomware attacks pointed to the involvement of IP addresses from a China-based ISP in the distribution of the malware and the receipt of the victim data, though the exact origin of the perpetrators remains undetermined.
Laura French
June 6, 2024
The FBI’s assistant cyber director outlined its efforts to disrupt threat actors as its victim support strategies evolve.
Sponsored by Sophos June 6, 2024
Recent research finds signs of progress in the public-private alliance against ransomware.
Dan Raywood June 6, 2024
BitDefender research demonstrates RaaS model of operators and affiliates.
ChicagoVPS is your gateway to unparalleled hosting solutions. Our state-of-the-art datacenters and powerful network ensures lightning-fast speeds and uninterrupted connectivity for your websites and applications. Whether you’re a startup looking for scalable resources or an enterprise in need of enterprise-grade hosting, our range of plans and customizable solutions guarantee a perfect fit. Trust in ChicagoVPS to deliver excellence, combining unmatched reliability and top-tier support.
For Inquiries or to receive a personalized quote, please reach out to us through our contact form here or email us at sales@chicagovps.net.
