CISA has released a recovery script for organizations that have been impacted by the ESXiArgs ransomware. The ESXiArgs ransomware encrypts configuration files on vulnerable ESXi servers, potentially rendering virtual machines unusable, says CISA.
CISA recommends that ‘organizations impacted by ESXiArgs evaluate the script and guidance provided in the accompanying README file to determine if it is fit for attempting to recover access to files in their environment’.
Access the ESXiArgs-Recover script at https://github.com/cisagov/ESXiArgs-Recover
