What's worse than paying an extortion bot that auto-pwned your database?
ID: 5a63c054-115c-5f4e-9e80-2dad069d3535
STIX ID: report--5a63c054-115c-5f4e-9e80-2dad069d3535
Feed Name: The Register (Security)
Threat Score
Security researchers observed an automated extortion bot scanning for publicly exposed PostgreSQL and MySQL servers with weak credentials, brute-forcing access, saving a small sample of rows, deleting tables and databases, and leaving ransom notes demanding Bitcoin; the campaign has already netted payments and appears widespread given millions of exposed databases.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.