Royal Ransomware Expands to Target Linux, VMware ESXi

The ransomware gang has also started using the BatLoader dropper and SEO poisoning for initial access.