Well, that didn’t take long.
The script that allowed VMware ESXi server owners infected with ransomware(opens in new tab) to restore the files no longer works, because the attackers updated the encryptor and patched the flaw it had. Now, those without endpoint protection most likely won’t be able to restore the files without getting the decryption key from the threat actors.
The news was confirmed by BleepingComputer(opens in new tab), whose researchers analyzed freshly obtained samples of the encryptor.
