Frequency
2
occurrences
First Seen
January 9, 2026
Last Seen
January 9, 2026
Related Threat Clusters
-
China-linked Cybercriminals Exploit VMware ESXi Vulnerabilities
Chinese-linked cybercriminals utilized a VMware ESXi hypervisor escape kit to target the ESXi hypervisor. Researchers from Huntress reported that the toolkit was in development as early as February 2024 and was used in…
1 article · Updated January 9, 2026 -
Chinese Cybercriminals Exploit ESXi Zero-Days Before Public Disclosure
Chinese-linked cybercriminals utilized a VMware ESXi hypervisor escape toolkit over a year prior to the public disclosure of the vulnerabilities. Researchers at Huntress identified an intrusion in December 2025,…
1 article · Updated January 9, 2026
Recent Intelligence Reports
- China crew abused ESXi zero-days a year before disclosure — Theregister · January 9, 2026
- China-linked cybercrims abused VMware ESXi zero — Theregister · January 9, 2026