Lorenz Ransomware Hacks Mitel VoIP Appliance for Initial Access to Corporate Networks

After waiting almost a month following initial access, the group then proceeded with lateral movement, data exfiltration via FileZilla, and encryption with BitLocker and Lorenz ransomware on ESXi systems.