http://torzcd47rw4qh36g4yqxvv2tmifgmu6jjalkyqz4e4lzzwtfdfc7qaqd.onion/vmware-user-worried-about-esxi-ransomware-check-your-patches-now-mobile-hacker-for-hire/index.html
Find important VMWare files for each volume. The crooks use the find command on each volume in your /vmfs/volumes/ directory to locate files from this list of extensions: .vmdk , .vmx , .vmxf , .vmsd , .vmsn , .vswp , .vmss , .nvram and .vmem .