SEXi is a threat actor. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does SEXi exploit?

Specific CVE exploitation data for SEXi is being tracked. Check the Strobes VI threat actor profile for updates.

SEXi

Exploited CVEs

Overview

SEXi is a ransomware group that targets VMware ESXi servers, encrypting data and demanding ransom payments. They have been observed encrypting virtual machines and backups, causing significant disruptions to services. The group's name is a play on the word "ESXi," indicating a deliberate focus on these systems. SEXi has been linked to other ransomware variants based on the Babuk source code.

Exploited Vulnerabilities

No exploited CVEs have been attributed to this threat actor yet.

Browse CVE Database