BlackMatter gang rapidly evolves, the group has developed a Linux version that allows operators to targets VMwares ESXi VM platform. This is the last ransomware in order of time that is able to target VM platforms, some of the other ransomware operations that do the same are REvil, RansomExx/Defray, Mespinoza, HelloKitty, and Babuk. The group is recruiting crooks with access to the networks of large enterprises in the US, the UK, Canada, or Australia.”]
Source: https://securityaffairs.co/wordpress/120862/cyber-crime/blackmatter-ransomware-linux-version.html