Malware5 min read
Ransomware Gangs Share ISPsystem VMs to Hide Attacks
Sophos finds 7,000+ servers with identical hostnames from ISPsystem VMmanager templates. LockBit, Qilin, and Conti all used the same bulletproof hosting VMs.
James RiveraFeb 6, 2026