ESXi

 View Only
  • 1.  ALERT - Ransomware attack

    Posted Nov 06, 2022 12:57 AM

    All my storages are encrypted.

    I have Vmware Esx 6 and Esx 8.1 Essential

    In the file name appears the name of an encryption company called https: // www msgsafe io

    I have no relationship with that company.

    Does anyone know her?

    The attack started at 4.30 am GMT -3

    Attached example of the state of a virtual machine.

    Any idea would help.

    Thank you

     

    Moderator note: URL has been modified, so that nobody accidentally clicks on the link.



  • 2.  RE: ALERT - Ransomware attack

    Broadcom Employee
    Posted Nov 06, 2022 06:11 AM

    What did VMware support say?

     



  • 3.  RE: ALERT - Ransomware attack

    Broadcom Employee
    Posted Nov 06, 2022 06:12 AM

    As your post needs moving to the correct area of the Communities, I have reported it to the moderators.

     



  • 4.  RE: ALERT - Ransomware attack

    Posted Nov 06, 2022 02:32 PM

    Scoot , can you help me ?

    Which is the correct area for this post .. ?  I did´nt find security .. ?

    I tried to reach the company https://www.msgsafe.io  but no luck.

    I will create a ticket in support ..

    No VIB installed in this servers...

    Thanks



  • 5.  RE: ALERT - Ransomware attack

    Posted Nov 06, 2022 03:28 PM

    Your post has already been moved to the ESXi area.

    The company behind the DNS-Domain is a mail hoster, so contacting them may not help, and the email address is likely used by the hackers themselves to extort money from you.

    André