Stopping the Fairlife Playbook — Inside the Anubis Attack on Virtual Infrastructure

On July 16, Coca-Cola disclosed unauthorized access to Fairlife's systems, including production environments, forcing a suspension of US operations. Days later, the Anubis ransomware group listed Fairlife on its leak site, claiming it had encrypted the company's Nutanix hypervisor infrastructure and exfiltrated a terabyte of data. This session breaks down who Anubis is and how the attack actually worked, stage by stage — from gaining administrative access to the hypervisor host, to shutting down VMs and encrypting the datastore, an attack path that can also happen on ESXi. Join Vali Cyber as we cover:

• Anubis's background and where they fit in the current ransomware landscape
• How the attack unfolded, from initial access to encryption
• Why the hypervisor was the target, and why the same approach works against VMware ESXi as easily as Nutanix
• How preemptive security at the hypervisor layer can stop this exact attack chain before impact

Whether you're running VMware, Nutanix, or another hypervisor platform, this session will give you a clear picture of how this attack worked, where the exposure is, and how you can stay secure.