Luna

Luna is a ransomware family written in Rust and described in reporting as part of the broader trend of newer ransomware families using Rust or Go to build cross-platform malware. It has been observed in the wild and has been listed among ransomware families targeting VMware ESXi environments. Reporting also shows Luna was advertised as a ransomware-as-a-service program on the Russian-language cybercrime forum RAMP, where a June 2022 listing indicated an 85/15 affiliate-operator revenue split. The available content does not provide high-confidence details on Luna’s specific infection chain, encryption routine, ransom note format, associated threat actor, or unique indicators of compromise beyond its use as ransomware, its Rust implementation, its presence in the wild, its ESXi targeting, and its appearance in RaaS advertising.