Scattered Spider Targeting VMware vSphere Environments

The financially motivated group is pivoting from Active Directory to VMware vSphere environments, deploying ransomware from the hypervisor.