Ransomware Groups Exploit SSH Tunneling in VMware ESXi Attacks

Cybercriminals are increasingly targeting VMware ESXi appliances, leveraging SSH tunneling to establish covert persistence and deploy ransomware on compromised systems, according to cybersecurity experts from Sygnia. VMware ESXi serves as a bare-metal hypervisor that allows multiple virtual machines to operate…