[Intel]: https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/docs/vmw-exposing-malware-in-linux-based-multi-cloud-environments.pdf

[timb-machine]

Area

Press/academia

Parent threat

Defense Evasion, Command and Control, Exfiltration, Impact

Finding

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/docs/vmw-exposing-malware-in-linux-based-multi-cloud-environments.pdf

Industry reference

attack:T1486:Data Encrypted for Impact

Malware reference

XMRig
Hello Kitty
#546
REvil
DarkSide
BlackMatter
Defray777
ViceSociety
Erebus
GonnaCry
eChoraix
Sysrv
TeamTNT
Mexalz
Omelette
WatchDog
Kinsing
Cobalt Strike
Vermillion Strike
Merlin
#545
#547
RedXOR
#548
ACBackdoor
#549
ELF_Plead

Actor reference

No response

Component

Linux, VMware

Scenario

No response

Scenario variation

Internal enterprise services, Internal specialist services