The BlackMatter gang has joined the ranks of ransomware operations to develop a Linux encryptor that targets VMware’s ESXi virtual machine platform. Almost every enterprise-targeting ransomware operation has begun to release encryptors that specifically target its virtual machines. RansomExx/Defray, HelloKitty, Babuk, Mespinoza, GoGoogle have also created Linux encryptors for this purpose. The encryption routines used by the ransomware were the same custom and unique ones used by DarkSide.
Source: https://www.bleepingcomputer.com/news/security/linux-version-of-blackmatter-ransomware-targets-vmware-esxi-servers/