Maestro Payload is a malware family linked to campaigns that exploit VMware ESXi hypervisor vulnerabilities.
Maestro Payload is a malware family linked to campaigns that exploit VMware ESXi hypervisor vulnerabilities. It appears as the payload within a multi-zero-day chain, underscoring the growing risk to virtualization infrastructure and the potential for persistent access within affected data centers.
Chinese-speaking threat actors conducted attacks using a VMware ESXi exploit toolkit that leveraged three zero-day vulnerabilities, identified as CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226. The initial access…