Skip to content
Submit incident
DII-2025-00250
ReportedReported by fewer than three independent publishers, with no official finding.

Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure

The notorious cybercrime group known as Scattered Spider is targeting VMware ESXi hypervisors in attacks targeting retail, airline, and transportation sectors in North America. “The group’s core tactics have remained...

28 July 2025 · Ransomware and extortion
28 July 2025
DII-2025-002505 sources ↓
Quick facts
Category
Ransomware and extortion
Source
DataBreaches.net
Date
28 July 2025
Drafted by
Raidu Incident Detection

What happened

Not publicly disclosed.

Classification

Category
Ransomware and extortion

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

DataBreaches.net
Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
28 July 2025
thehackernews.com
Scattered Spider
cloud.google.com
said
thehackernews.com
history
thehackernews.com
The Hacker News