Uploaded August 2025 | Updated September 2026, 9 minutes ago
Nicklas Keijser (Truesec, SE), Anders Olsson (Truesec, SE)
Nicklas Keijser is a Senior Threat Analyst at Truesec, a role that involves much reverse engineering and looking into all things malware. Nicklas is also a subject matter expert in industrial control systems and anything related to its security. He started his career programming PLCs, SCADA systems, and almost anything else possible within the industry. Before joining Truesec, Nicklas worked at the Swedish National CERT in the Swedish Civil Contingencies Agency.
Anders is a Senior Infrastructure Architect with more than 25 years of experience in design and implementation of IT infrastructure. He's one of only 301 people worldwide who have passed the VMware Certified Design Expert (VCDX) design and in-person panel defense, and he has also been awarded the VMware vExpert title every year from 2016 to present. Anders specializes in VMware vSphere security, covering both proactive security design and hardening as well as reactive incident response and forensics work.
--
All ransomware actors now have the capability to encrypt hypervisors, which has led to some of the biggest attacks and has brought down entire organisations. This talk will focus on VMware vSphere/ESXi and give in-depth insight on how these attacks are performed, how to protect from them but also how detection and response can be accomplished, despite the inability to install security agents on ESXi or vCenter Server.
Nicklas Keijser (Truesec, SE), Anders Olsson (Truesec, SE)
Nicklas Keijser is a Senior Threat Analyst at Truesec, a role that involves much reverse engineering and looking into all things malware. Nicklas is also a subject matter expert in industrial control systems and anything related to its security. He started his career programming PLCs, SCADA systems, and almost anything else possible within the industry. Before joining Truesec, Nicklas worked at the Swedish National CERT in the Swedish Civil Contingencies Agency.
Anders is a Senior Infrastructure Architect with more than 25 years of experience in design and implementation of IT infrastructure. He's one of only 301 people worldwide who have passed the VMware Certified Design Expert (VCDX) design and in-person panel defense, and he has also been awarded the VMware vExpert title every year from 2016 to present. Anders specializes in VMware vSphere security, covering both proactive security design and hardening as well as reactive incident response and forensics work.
--
All ransomware actors now have the capability to encrypt hypervisors, which has led to some of the biggest attacks and has brought down entire organisations. This talk will focus on VMware vSphere/ESXi and give in-depth insight on how these attacks are performed, how to protect from them but also how detection and response can be accomplished, despite the inability to install security agents on ESXi or vCenter Server.
