Eldorado: A New Ransomware Threat Targeting Windows and VMware

Red | Attack Report
Download PDF

Eldorado, a new Golang based ransomware, targets Windows and VMware ESXi, affecting U.S. sectors like real estate, education, healthcare, and manufacturing. It uses ChaCha20 and RSA encryption, avoids critical system files to maintain usability, and self-deletes post-encryption.