Cheerscrypt

Cheerscrypt is ransomware that was reported in May 2022 as specifically targeting ESXi servers. The available content states that it encrypts data on victim machines using the Sosemanuk stream cipher with a key generated via Elliptic-curve Diffie-Hellman (ECDH). The content identifies it as Cheerscrypt (S1096). No additional high-confidence details on infection vector, associated threat actor, ransom note, file extension, or specific indicators of compromise are provided in the supplied material.