Ransomware attacks on ESXi and Proxmox exploited reused and exposed credentials
RANSOMWAREThe Gentlemenredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Researchers at Kaspersky looked at two ransomware attacks on systems that run many virtual computers. In both cases the attackers got in through weak passwords and poor access control rather than a flaw in the software itself. Keeping software updated is not enough on its own, so passwords and settings must be managed too.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Do not reuse the same root password across several ESXi hosts.
- Limit monitoring accounts to the privileges and network paths their monitoring task needs.
- Keep administrator interfaces and SSH access off general server networks.
- Stop storing administrative credentials in plain-text notes on workstations.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Kaspersky Securelist
Who and what is in it
Threat actors