Скачать или смотреть How Scattered Spider Hijacks ESXi

In this episode, we explore a creative and highly effective ransomware technique used by Scattered Spider, one that doesn't rely on malware or exploits, but on deep knowledge of virtual infrastructure.

The Disk-Swap attack on ESXi allows attackers to extract Active Directory and deploy ransomware by misusing trusted VMware features. It's quiet, fast, and completely sidesteps traditional detection tools.

We'll walk through how the attack works, why it bypasses so many defenses, and what defenders need to rethink in their architecture to close this gap.
If you've ever assumed your hypervisors were out of reach—this episode is for you.

This technique is also in Spotify: ⁠https://open.spotify.com/show/5W5bhvTsNbJt...