A new ransomware variant called VanHelsing has been discovered, capable of targeting Windows, Linux, VMware, and ESXi systems.VanHelsing operates on a Ransomware-as-a-Service model and has been active since March 7, 2025.Three organizations have already fallen victim to VanHelsing, with a ransom demand of $500,000 in crypto.The ransomware is attributed to Russian operators and may become a significant threat in the future.