Story perspectives

Cybercrime Group Scattered Spider Targets VMware with Ransomware

7/28/2025

29 7

Summary

Story summary

Scattered Spider, a cybercrime group, is targeting VMware ESXi hypervisors across North America, particularly in retail, airlines, and transportation.
They employ social engineering tactics, impersonating IT staff to exploit Active Directory for ransomware deployment and data exfiltration.
Recent attacks demonstrate their swift and stealthy approach, evading conventional security measures.
Experts advise enhancing verification processes and addressing known vulnerabilities to reduce risks.

1 of 1

Story summary

Scattered Spider, a cybercrime group, is targeting VMware ESXi hypervisors across North America, particularly in retail, airlines, and transportation.
They employ social engineering tactics, impersonating IT staff to exploit Active Directory for ransomware deployment and data exfiltration.
Recent attacks demonstrate their swift and stealthy approach, evading conventional security measures.
Experts advise enhancing verification processes and addressing known vulnerabilities to reduce risks.