
- Sophos reports bulletproof hosting providers renting VMmanager-based servers to cybercriminals
- Identical Windows templates leave thousands of exposed servers exploited for ransomware and malware campaigns
- Infrastructure linked to major groups (LockBit, Conti, BlackCat, Qilin, TrickBot, etc.) and sanctioned Russian hosting firm