Cheerscrypt
S1096 · Windows, ESXi
Cheerscrypt is a ransomware that was developed by Cinnamon Tempest and has been used in attacks against ESXi and Windows environments since at least 2022. Cheerscrypt was derived from the leaked Babuk source code and has infrastructure overlaps with deployments of Night Sky ransomware, which was also derived from Babuk.
ATT&CK S1096
Sigma rules0
YARA rules0
Live IOCs0