Russian-speaking group BlackMatter has created a Linux version of its malware designed to target ESXi servers hosting virtual machines. MalwareHunterTeam says the group has incorporated the “best” features of DarkSide, REvil and LockBit malware. Multiple experts say the group appears to be a spinoff from DarkSide and REvil, based on the code being used by both operations being so similar. The malware can run ESXi shell commands, which the malware uses to shut down virtual machines so that they can be forcibly encrypted and held to ransom.”]
Source: https://www.cuinfosecurity.com/blackmatter-group-debuts-linux-targeting-ransomware-a-17244