Huntress Ransomware Threats Targeting Hypervisors Surge
Article Content
Browse articles 
Hypervisor attacks, particularly on VMware ESXi, have increased significantly, with incidents tripling from 2021 to 2022. These attacks can lead to substantial financial losses, with some organizations facing up to $400 million in damages. The limited visibility and protections of hypervisors make them a critical vulnerability in modern virtualized environments.
Ask AI about this cluster
Answers cite the sources they use
Updated 226d ago How this analysis works
More articles in this cluster (10)
Following this threat?
Track Akira and CVE-2024-37085 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Attackers Exploit MFA Gaps in SonicWall VPN Access On August 4, 2026, an Akira ransomware affiliate successfully accessed a SonicWall SSL VPN by spraying passwords, exploiting the lack of multi-factor authentication (MFA). After gaining access, the attacker used RDP to reach the domain controller and enumerate Active Directory, although the ransomware deployment… 
Huntress Analyzes Akira Ransomware Attack After EDR Failure In September 2026, Huntress deployed its agent at an organization already compromised by Akira ransomware. The post-compromise installation meant crucial EDR telemetry was missing, hindering initial access insights. Researchers reconstructed the attack using Windows Event Logs, Registry artifacts, and Akira log files.…