SEXi
Aliases: Formosa, Limpopo, Socotra
- First seen
- 2022-04-15 00:00:00
- Malware type
- ransomware
- Profile updated
- 2026-07-07 13:13:38
Targeted industries: healthcare-and-pharmaceutical financial-services government-and-public-sector
Context
Ransomware, likely based on the leaked Babuk source code.
Reports & references
- cybersecurity-insiders.com — Proven Data Restores Powerhosts Vmware Backups After Sexi Ransomware Attack (report)
- heimdalsecurity.com — Powerhosts Esxi Servers Encrypted With New Sexi Ransomware (report)
- darkreading.com — Sexi Ransomware Desires Vmware Hypervisors (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Sexi (report)
- x.com — 1775843087736025175 (report)