The infamous cybercriminal organization referred to as Scattered Spider is focusing on VMware ESXi hypervisors in assaults aimed at the retail, airline, and transportation industries in North America.
“The primary strategies of the group have stayed unchanged and do not hinge on software vulnerabilities. Rather, they employ a tried-and-true playbook centered on making phone calls to an IT support desk,” stated Google’s Mandiant team in a comprehensive report.