Playcrypt (ESXi variant) (adc4a5e0-7f48-48ee-9a9d-79ecd3db35aa)
The ESXi variant of Playcrypt (AKA Play ransomware), a malware associated with the Play ransomware actor group active since at least 2022.[U.S. CISA Play Ransomware December 2023]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Play (60f686d0-ae3d-5662-af32-119217dee2a7) | Tidal Groups | Playcrypt (ESXi variant) (adc4a5e0-7f48-48ee-9a9d-79ecd3db35aa) | Tidal Software | 1 |