{"id":2494,"date":"2025-07-08T20:38:10","date_gmt":"2025-07-08T18:38:10","guid":{"rendered":"https:\/\/www.apvnorge.no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/"},"modified":"2025-07-08T20:38:10","modified_gmt":"2025-07-08T18:38:10","slug":"bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery","status":"publish","type":"post","link":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/","title":{"rendered":"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery"},"content":{"rendered":"<div id=\"apvno-3971099399\" class=\"apvno-before-content apvno-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7003427967427457\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:inline-block;width:970px;height:250px;\" \ndata-ad-client=\"ca-pub-7003427967427457\" \ndata-ad-slot=\"6272152047\"><\/ins> \n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p class=\"wp-block-paragraph\">New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A newly emerged ransomware group known as&nbsp;<a href=\"https:\/\/cybersecuritynews.com\/bert-ransomware-upgrades-to-attacks-linux-machines\/\" target=\"_blank\" rel=\"noreferrer noopener\">BERT<\/a>&nbsp;has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">First observed in April 2025, BERT (tracked by Trend Micro as Water Pombero) has quickly established itself as a serious threat to virtualized environments across Asia, Europe, and the United States.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2026<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/share.google\/KsswjV2ejJhjNApcV\">https:\/\/share.google\/KsswjV2ejJhjNApcV<\/a><\/p>\n<div id=\"apvno-2999814770\" class=\"apvno-after apvno-entity-placement\"><script>\r\n_adsys_id = 33949;\r\n_adsys_size = 1;\r\n<\/script>\r\n<script src=\"https:\/\/d.wedosas.net\/d.js\"><\/script>    \r\n<\/br>\r\n<div>\r\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<!-- AD-4 -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:inline-block;width:970px;height:250px\"\r\n     data-ad-client=\"ca-pub-7003427967427457\"\r\n     data-ad-slot=\"6272152047\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><\/div>\r\n<a href=\"https:\/\/affiliates.ssl.com\/820-3-1-13.html\" target=\"_blank\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" style=\"border:0px\" src=\"https:\/\/i0.wp.com\/affiliates.ssl.com\/media\/banners\/SSL-banner-UC-certificate-2-v5.png?resize=640%2C79&#038;ssl=1\" width=\"640\" height=\"79\" alt=\"Microsoft Exchange SAN UCC SSL\"><\/a><\/div>","protected":false},"excerpt":{"rendered":"<p>New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts. A newly emerged ransomware group known as&nbsp;BERT&nbsp;has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations.&nbsp; First observed [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[44],"tags":[71,34],"class_list":["post-2494","post","type-post","status-publish","format-standard","hentry","category-hackers","tag-esxi","tag-linux"],"translation":{"provider":"WPGlobus","version":"3.0.3","language":"no","enabled_languages":["en","no","cz"],"languages":{"en":{"title":true,"content":true,"excerpt":false},"no":{"title":false,"content":false,"excerpt":false},"cz":{"title":false,"content":false,"excerpt":false}}},"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts. A newly emerged ransomware group known as BERT has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations. First observed\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"vklocurek\"\/>\n\t<meta name=\"google-site-verification\" content=\"TrS3Ce4SzthGp870C1FeMCHMy8m2nPpzG2NfPcdfJi0\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"nb_NO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Et teknologiselskap - Dedisert til alle som ikke lenger kan reise til det vakre landet med oss.\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery - Et teknologiselskap\" \/>\n\t\t<meta property=\"og:description\" content=\"New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts. A newly emerged ransomware group known as BERT has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations. First observed\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/www.apvnorge.no\/wp-content\/uploads\/2018\/05\/APV.gif?fit=23081&#038;ssl=1\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/i0.wp.com\/www.apvnorge.no\/wp-content\/uploads\/2018\/05\/APV.gif?fit=23081&#038;ssl=1\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-07-08T18:38:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-07-08T18:38:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/profile.php?id=100064041250396\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery - Et teknologiselskap\" \/>\n\t\t<meta name=\"twitter:description\" content=\"New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts. A newly emerged ransomware group known as BERT has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations. First observed\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/i0.wp.com\/www.apvnorge.no\/wp-content\/uploads\/2018\/05\/APV.gif?fit=23081&amp;ssl=1\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#blogposting\",\"name\":\"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery - Et teknologiselskap\",\"headline\":\"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery\",\"author\":{\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/author\\\/vklocurek\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.apvnorge.no\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/APV.gif?fit=230%2C81&ssl=1\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/#articleImage\",\"width\":230,\"height\":81},\"datePublished\":\"2025-07-08T20:38:10+02:00\",\"dateModified\":\"2025-07-08T20:38:10+02:00\",\"inLanguage\":\"nb-NO\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#webpage\"},\"articleSection\":\"Hackers, ESXi, Linux\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.apvnorge.no\\\/no\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/category\\\/hackers\\\/#listItem\",\"name\":\"Hackers\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/category\\\/hackers\\\/#listItem\",\"position\":2,\"name\":\"Hackers\",\"item\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/category\\\/hackers\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#listItem\",\"name\":\"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#listItem\",\"position\":3,\"name\":\"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/category\\\/hackers\\\/#listItem\",\"name\":\"Hackers\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/#organization\",\"name\":\"{:en}Et teknologiselskap{:}{:gb}Et teknologiselskap{:}\",\"description\":\"Dedisert til alle som ikke lenger kan reise til det vakre landet med oss.\",\"url\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.apvnorge.no\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/APV.gif?fit=230%2C81&ssl=1\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#organizationLogo\",\"width\":230,\"height\":81},\"image\":{\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/profile.php?id=100064041250396\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/author\\\/vklocurek\\\/#author\",\"url\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/author\\\/vklocurek\\\/\",\"name\":\"vklocurek\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2375d97e1232a252467ba685952ffd8523dec8c328b90b3b7462af20166b2af5?s=96&r=g\",\"width\":96,\"height\":96,\"caption\":\"vklocurek\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#webpage\",\"url\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/\",\"name\":\"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery - Et teknologiselskap\",\"description\":\"New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts. A newly emerged ransomware group known as BERT has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations. First observed\",\"inLanguage\":\"nb-NO\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/author\\\/vklocurek\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/author\\\/vklocurek\\\/#author\"},\"datePublished\":\"2025-07-08T20:38:10+02:00\",\"dateModified\":\"2025-07-08T20:38:10+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/#website\",\"url\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/\",\"name\":\"{:en}Et teknologiselskap{:}{:gb}Et teknologiselskap{:}\",\"description\":\"Dedisert til alle som ikke lenger kan reise til det vakre landet med oss.\",\"inLanguage\":\"nb-NO\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.apvnorge.no\\\/no\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery - Et teknologiselskap","description":"New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts. A newly emerged ransomware group known as BERT has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations. First observed","canonical_url":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"TrS3Ce4SzthGp870C1FeMCHMy8m2nPpzG2NfPcdfJi0","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#blogposting","name":"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery - Et teknologiselskap","headline":"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery","author":{"@id":"https:\/\/www.apvnorge.no\/no\/author\/vklocurek\/#author"},"publisher":{"@id":"https:\/\/www.apvnorge.no\/no\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/i0.wp.com\/www.apvnorge.no\/wp-content\/uploads\/2018\/05\/APV.gif?fit=230%2C81&ssl=1","@id":"https:\/\/www.apvnorge.no\/no\/#articleImage","width":230,"height":81},"datePublished":"2025-07-08T20:38:10+02:00","dateModified":"2025-07-08T20:38:10+02:00","inLanguage":"nb-NO","mainEntityOfPage":{"@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#webpage"},"isPartOf":{"@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#webpage"},"articleSection":"Hackers, ESXi, Linux"},{"@type":"BreadcrumbList","@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.apvnorge.no\/no#listItem","position":1,"name":"Home","item":"https:\/\/www.apvnorge.no\/no","nextItem":{"@type":"ListItem","@id":"https:\/\/www.apvnorge.no\/no\/category\/hackers\/#listItem","name":"Hackers"}},{"@type":"ListItem","@id":"https:\/\/www.apvnorge.no\/no\/category\/hackers\/#listItem","position":2,"name":"Hackers","item":"https:\/\/www.apvnorge.no\/no\/category\/hackers\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#listItem","name":"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.apvnorge.no\/no#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#listItem","position":3,"name":"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery","previousItem":{"@type":"ListItem","@id":"https:\/\/www.apvnorge.no\/no\/category\/hackers\/#listItem","name":"Hackers"}}]},{"@type":"Organization","@id":"https:\/\/www.apvnorge.no\/no\/#organization","name":"{:en}Et teknologiselskap{:}{:gb}Et teknologiselskap{:}","description":"Dedisert til alle som ikke lenger kan reise til det vakre landet med oss.","url":"https:\/\/www.apvnorge.no\/no\/","logo":{"@type":"ImageObject","url":"https:\/\/i0.wp.com\/www.apvnorge.no\/wp-content\/uploads\/2018\/05\/APV.gif?fit=230%2C81&ssl=1","@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#organizationLogo","width":230,"height":81},"image":{"@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/profile.php?id=100064041250396"]},{"@type":"Person","@id":"https:\/\/www.apvnorge.no\/no\/author\/vklocurek\/#author","url":"https:\/\/www.apvnorge.no\/no\/author\/vklocurek\/","name":"vklocurek","image":{"@type":"ImageObject","@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/2375d97e1232a252467ba685952ffd8523dec8c328b90b3b7462af20166b2af5?s=96&r=g","width":96,"height":96,"caption":"vklocurek"}},{"@type":"WebPage","@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#webpage","url":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/","name":"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery - Et teknologiselskap","description":"New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts. A newly emerged ransomware group known as BERT has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations. First observed","inLanguage":"nb-NO","isPartOf":{"@id":"https:\/\/www.apvnorge.no\/no\/#website"},"breadcrumb":{"@id":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/#breadcrumblist"},"author":{"@id":"https:\/\/www.apvnorge.no\/no\/author\/vklocurek\/#author"},"creator":{"@id":"https:\/\/www.apvnorge.no\/no\/author\/vklocurek\/#author"},"datePublished":"2025-07-08T20:38:10+02:00","dateModified":"2025-07-08T20:38:10+02:00"},{"@type":"WebSite","@id":"https:\/\/www.apvnorge.no\/no\/#website","url":"https:\/\/www.apvnorge.no\/no\/","name":"{:en}Et teknologiselskap{:}{:gb}Et teknologiselskap{:}","description":"Dedisert til alle som ikke lenger kan reise til det vakre landet med oss.","inLanguage":"nb-NO","publisher":{"@id":"https:\/\/www.apvnorge.no\/no\/#organization"}}]},"og:locale":"nb_NO","og:site_name":"Et teknologiselskap - Dedisert til alle som ikke lenger kan reise til det vakre landet med oss.","og:type":"article","og:title":"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery - Et teknologiselskap","og:description":"New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts. A newly emerged ransomware group known as BERT has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations. First observed","og:url":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/","og:image":"https:\/\/i0.wp.com\/www.apvnorge.no\/wp-content\/uploads\/2018\/05\/APV.gif?fit=23081&#038;ssl=1","og:image:secure_url":"https:\/\/i0.wp.com\/www.apvnorge.no\/wp-content\/uploads\/2018\/05\/APV.gif?fit=23081&#038;ssl=1","article:published_time":"2025-07-08T18:38:10+00:00","article:modified_time":"2025-07-08T18:38:10+00:00","article:publisher":"https:\/\/www.facebook.com\/profile.php?id=100064041250396","twitter:card":"summary_large_image","twitter:title":"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery - Et teknologiselskap","twitter:description":"New ransomware group employs advanced virtualization attack tactics to maximize damage and hinder organizational recovery efforts. A newly emerged ransomware group known as BERT has introduced a particularly disruptive capability that sets it apart from traditional ransomware operations: the ability to forcibly terminate ESXi virtual machines before encryption, significantly complicating recovery efforts for targeted organizations. First observed","twitter:image":"https:\/\/i0.wp.com\/www.apvnorge.no\/wp-content\/uploads\/2018\/05\/APV.gif?fit=23081&ssl=1"},"aioseo_meta_data":{"post_id":"2494","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"limit_modified_date":false,"created":"2025-07-08 18:47:03","updated":"2025-07-08 18:47:03"},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.apvnorge.no\/no\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.apvnorge.no\/no\/category\/hackers\/\" title=\"Hackers\">Hackers<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tBERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.apvnorge.no\/no"},{"label":"Hackers","link":"https:\/\/www.apvnorge.no\/no\/category\/hackers\/"},{"label":"BERT Ransomware Forcibly Shut Down ESXi Virtual Machines to Disrupt Recovery","link":"https:\/\/www.apvnorge.no\/no\/bert-ransomware-forcibly-shut-down-esxi-virtual-machines-to-disrupt-recovery\/"}],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9T0bk-Ee","jetpack-related-posts":[],"jetpack_likes_enabled":true,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.apvnorge.no\/no\/wp-json\/wp\/v2\/posts\/2494","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.apvnorge.no\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.apvnorge.no\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.apvnorge.no\/no\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.apvnorge.no\/no\/wp-json\/wp\/v2\/comments?post=2494"}],"version-history":[{"count":0,"href":"https:\/\/www.apvnorge.no\/no\/wp-json\/wp\/v2\/posts\/2494\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.apvnorge.no\/no\/wp-json\/wp\/v2\/media?parent=2494"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.apvnorge.no\/no\/wp-json\/wp\/v2\/categories?post=2494"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.apvnorge.no\/no\/wp-json\/wp\/v2\/tags?post=2494"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}