---
title: New Linux Variant of Play Ransomware Targeting VMWare ESXi Systems
description: Cybersecurity researchers have discovered a new Linux variant of a ransomware strain known as Play (aka Balloonfly and PlayCrypt) that’s designed to target VMWare ESXi environments. This development suggests that the group could be broadening its attacks across the Linux platform, leading to an expanded victim pool and more successful ransom negotiations.
---

[Outsource IT Blog](https://blog.oitc.ca)

# [New Linux Variant of Play Ransomware Targeting VMWare ESXi Systems](https://blog.oitc.ca/alerts/new-linux-variant-of-play-ransomware-targeting-vmware-esxi-systems)

 Written by [Nathan Zych](https://blog.oitc.ca/author/nathan-zych) | Aug 16, 2024 5:02:13 PM

[Cybersecurity researchers have identified a new Linux variant of the Play ransomware that specifically targets VMWare ESXi systems. This development suggests broader attacks across the Linux platform, potentially leading to an expanded victim pool and more successful ransom negotiations. Read more](https://thehackernews.com/2024/07/new-linux-variant-of-play-ransomware.html)[here](https://thehackernews.com/2024/07/new-linux-variant-of-play-ransomware.html).

<https://www.oitc.ca/contact/>

[Click here to contact Outsource IT](https://www.oitc.ca/contact/)

[View full post](https://blog.oitc.ca/alerts/new-linux-variant-of-play-ransomware-targeting-vmware-esxi-systems)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Nathan Zych"
  },
  "dateModified" : "2025-07-10T22:04:18.948Z",
  "datePublished" : "2024-08-16T17:02:13Z",
  "headline" : "New Linux Variant of Play Ransomware Targeting VMWare ESXi Systems",
  "image" : {
    "@type" : "ImageObject",
    "height" : 380,
    "url" : "https://341889482.fs1.hubspotusercontent-na3.net/hubfs/341889482/Imported_Blog_Media/linux.png",
    "width" : 728
  },
  "mainEntityOfPage" : "https://blog.oitc.ca/alerts/new-linux-variant-of-play-ransomware-targeting-vmware-esxi-systems",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Outsource IT Blog"
  }
}
```