New 'Helldown' Ransomware Variant Expands Attacks to VMware and Linux Systems

Helldown deploys Windows ransomware derived from the LockBit 3.0 code. Given the recent development of ransomware targeting ESX, it appears that the group could be evolving its current operations to target virtualized infrastructures via VMware.