New Linux Ransomware Bypasses Windows Security and Targets VMware
Effortless Account Access for Cybersecurity Updates
Welcome back, savvy readers! Delve into your cybersecurity insights by logging into your account using your trusted credentials. In case you’ve misplaced your password, fear not—you can recover it in no time. And if you’re new, creating an account is a breeze and it unlocks a world of updates on the latest cybersecurity revelations.
Unveiling a New Ransomware Threat: The Cross-Platform Agenda
Recently, the nefarious Agenda, also known as Qilin, has reared its head with a fresh ransomware variant. Uniquely crafted, this Linux-centric menace operates on Windows systems, marking a leap in cross-platform cyber-attacks. Spotting it requires keen vigilance as it cleverly exploits remote IT tools like Splashtop Remote and WinSCP. This techno-wizardry allows the perpetrators to bypass traditional Windows security, all while using legitimate-sounding applications.
The attackers demonstrate remarkable ingenuity by executing complex attacks that quietly install ransomware in hybrid environments, leaving minimal traces. With cunning use of remote-monitoring platforms such as ATERA Networks, they maintain access, running software like AnyDesk to issue commands undetected.
Agenda’s Strategic Target on Digital Fortresses
Targeting doesn’t stop there. By focusing on critical systems like Veeam backup servers, these criminals disable recovery mechanisms, stealing valuable backup tokens in the process. Their innovative use of GREATER SPLASHTOP’s SRManager.exe sets a new precedent by running Linux binaries on Windows, a rare but potent technique.
Their approach isn’t brute force but rather strategic, employing vulnerable drivers to slip through defensive cracks. The operations remind enterprise defenders of the necessity of tightening security protocols in virtual environments like VMware’s.
In 2025, more than 700 organizations in 62 countries have fallen victim to Agenda’s attacks. The affected sectors—manufacturing, finance, healthcare—echo the vital need for enhanced cybersecurity practices, especially in cross-system interactions.
Stay one step ahead by embracing Trend Vision One™ solutions, armed with detection capabilities to thwart these sophisticated threats. For continuous insights and updates, do keep an eye on our channels for real-time coverage!
Stay secure, stay informed. Follow us on Qsentinel and safeguard your digital experiences!
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more
