Skip to content
Threat Feed
Subscribe

Actor

Black Basta

1 brief RSS
Also known as: BlackBasta UNC4393
high threat

ESXi Syslog Configuration Change via esxcli

Detection of ESXi syslog configuration changes using esxcli, potentially indicating an attempt to disrupt logging and evade detection, with known association to Black Basta ransomware.

ESXi Black Basta +2 syslog vmware defense-evasion black-basta
2r 1t