Information relating to VMware products such as ESXi, vSphere and Horizon.
With ransomware evolving and the attack surface changing, they are now attacking ESXi and the datastores. The attackers have written Perl scripts to encrypt the datastores, and the ESXi install. This will lead to encrypted VM's and ESXi install, rendering everything failing to boot.
When using ESXi VMware rotates log when you power off and power on virtual machines. On servers that this happens to very rare for good reason. When using VVOLs this can make matters worse due to the 4GB config/log partition, and once full things start to go wrong such as snapshot fail.