Ransom.ELF.ESXi.Attacks

Short bio

Ransom.ELF.ESXi.Attacks is Malwarebytes’ detection name for attacks by ransomware groups on vulnerable ESXi systems

Malicious behavior

Ransom.ELF.ESXi.Attacks is an exploit against vulnerable ESXi Virtual Machines that tries to stop the virtual machines and encrypt them. Victims are then notified they need to buy the decryption keys.

Protection

Malwarebytes Nebula offers the Endpoint Agent for Linux machines. This agent is able to detect and remove Ransom.ELF.ESXi.Attacks.

Business remediation

How to remove Trojan.MalPack.DLF with the Malwarebytes Nebula console

You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.

Nebula endpoint tasks menu

Choose the Scan + Quarantine option. Afterwards you can check the Detections page to see which threats were found.

On the Quarantine page you can see which threats were quarantined and restore them if necessary.