CyberHappenings logo
☰
Home Browse About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Increased Targeting of Hypervisors by Ransomware Groups

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

In 2025, there has been a significant surge in ransomware attacks targeting hypervisors, particularly by the Akira ransomware group. Huntress Labs reported that hypervisor-related ransomware incidents increased from 3% in the first half of the year to 25% in the second half. This trend highlights the growing risk of hypervisors as a critical attack surface in virtualized environments. Attackers exploit the limited visibility and protections of hypervisors to deploy ransomware at scale, bypassing traditional endpoint security controls. The article outlines the threats observed and provides practical guidance for securing hypervisor infrastructure, including patching, access control, runtime hardening, and robust recovery strategies.

Timeline

  1. 16.12.2025 17:01 1 articles · 2h ago

    Surge in Hypervisor-Related Ransomware Incidents in 2025

    In 2025, Huntress Labs reported a significant increase in ransomware attacks targeting hypervisors, with incidents rising from 3% in the first half of the year to 25% in the second half. The Akira ransomware group is primarily responsible for this trend, exploiting the limited visibility and protections of hypervisors to deploy ransomware at scale. The article outlines the threats observed and provides practical guidance for securing hypervisor infrastructure.

    Show sources
    Open in new tab

Information Snippets