Jackpot! Three Years Of ESXi Ransomware Incidents

SANS Ransomware Summit 2023

Jackpot! Three Years Of ESXi Ransomware Incidents

Speakers: Josef Williamson, Senior Threat Intelligence Analyst, Crowdstrike

Nearly three years since ransomware actors were first observed targeting virtualization infrastructure in August 2020, ‘hypervisor jackpotting’ has emerged as a key tactic in Big Game Hunting (BGH) campaigns. More than half of ransomware incidents observed by CrowdStrike Intelligence since the start of 2022 have featured ESXi encryption. This presentation will provide consolidated insights from dozens of incidents into the Tactics, …

analyst august big big game hunting campaigns crowdstrike esxi esxi ransomware game hunting hypervisor incidents infrastructure intelligence jackpotting key ransomware sans speakers summit tactic targeting threat threat intelligence virtualization