.. /vpxa
Star

Stop Service

Vpxa functions as an intermediary service that connects the vpxd service on the vCenter Server with the hostd service on an ESXi host. Stopping this service will cause management and monitoring functions to cease.


Paths:

Resources:
Acknowledgements:

Stop Service

  1. Stops the vpxa service on an ESXi host.

    /etc/init.d/vpxa stop
    Use case
    An adversay may stop the vpxa service to cease remote management by the VCenter server.
    Privileges required
    Administrator
    Operating systems
    ESXi
    ATT&CK® technique
    T1489

    Tags
    E-Crime: Nevada
    Nevada Ransomware operates via an an affiliate program and has been reported to have carried out a campaign targeting any ESXi machine that is exposed to the internet