New GhostFrame Malware Targets VMware ESXi Servers to Steal Credentials and Hijack Virtual Machines

Researchers have uncovered GhostFrame, a previously undocumented command-and-control (C2) and post-exploitation framework that turns compromised VMware ESXi hosts into platforms for credential theft, virtual machine control, and network intrusion. Insikt Group’s November 10 report links its use to TAG-218, whose activity overlaps with Settra ransomware. The framework requires existing root access; it does not exploit […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform