Kaspersky reveals new Luna ransomware can encrypt Windows, Linux, and ESXi systems

On Wednesday 20^th of July 2020, Kaspersky security researchers revealed a new ransomware family named Luna which can be used to encrypt devices running several operating systems, including Windows, Linux, and ESXi systems. The new ransomware family was discovered via a dark web ransomware forum ad which revealed that the Luna ransomware appears to be specifically tailored to be used only by Russian-speaking threat actors.

“The advertisement states that Luna only works with Russian-speaking affiliates. Also, the ransom note hardcoded inside the binary contains spelling mistakes. For example, it says ‘a little team’ instead of ‘a small team’,” – Kaspersky.

Compared to other ransomware, Luna is very simple rust ransomware with limited capabilities based on the available command line options although it is still under development. Kaspersky also stated there is very little data on what victims have been encrypted using Luna ransomware, if any, given that the group has just been discovered and its activity is still being monitored.