Source In addition to buying compromised access, the Nevada Ransomware group has a dedicated team for post-exploitation and intrusion into target networks. Source However, the ransom notes seen in the attacks do not resemble Nevada ransomware, and the strain is known as ESXiArgs.

Read full article on Heimdal Security Blog