Researchers have uncovered GhostFrame, a previously undocumented command-and-control (C2) and post-exploitation framework that turns compromised VMware ESXi hosts into platforms for credential theft, virtual machine control, and network intrusion. Insikt Group’s November 10 report links its use to TAG-218, whose activity overlaps with Settra ransomware. The framework requires existing root access; it does not exploit […]
Read the original article:
New GhostFrame Malware Targets VMware ESXi Servers to Steal Credentials and Hijack Virtual Machines
