LockBit is the latest ransomware gang whose Linux encryptor has been discovered to be focusing on the encryption of VMware ESXi virtual machines. LockBit began promoting the new features of their Ransomware-as-a-Service operation on the RAMP hacking forums in October. LockBits provides a command-line interface allowing affiliates to enable and disable various features to tailor their attacks. The encryptor uses AES to encrypt files and elliptic-curve cryptography (ECC) algorithms to encrypt the decryption keys.”]