Product
vCenter
- First Reported
- Oct 27, 2025
- Latest Reported
- Jun 4, 2026
Reported Context (2)
- However, the threat actor was not observed SSH’ing into, or otherwise installing malware on, any ESXi or vCenter systems, despite public reporting indicating this is something the threat actor frequently does. Volexity Details VerdantBamboo Breach Using BRICKSTORM on Edge Appliances
- As part of its PowerShell operation, it establishes a connection to the vCenter server, enumerates all datacenters and clusters within the vCenter environment, and disables HA and DRS in cluster configurations. (see Cisco Talos Details Qilin Ransomware Tactics, from VPN Access to Network Encryption
Malware (7)
People (4)
Threat Actors (4)
MITRE ATT&CK (45)
Vendors (6)
Products (11)
Tools (25)
Industries (11)
Countries (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.