Recorded Future Follow GhostFrame: A new ESXi Implant Linked to Settra Ransomware GhostFrame is a new post-exploitation framework targeting VMware ESXi environments, linked to TAG-218 and Settra ransomware. https://www.recordedfuture.com/blog/ghostframe-esxi-implant-settra-ransomware recordedfuture.com