The SEXi gang is known for attacking VMware ESXi servers and encrypting data, demanding high ransoms, like the $140 million Bitcoin ransom from a Chilean data center.
Victims of SEXi attacks can identify the ransomware by encrypted filenames ending with .SEXi, targeted virtual machine-related files, and a ransom note called SEXi.txt.
[
Collection
]
[
|
...
]