Hackers Hijack Microsoft SQL Servers to Deploy Gh0st RAT and Monero Miners
Key Highlights: Attackers are scanning internet-exposed Microsoft SQL Server instances and testing more than 2,700 common passwords. The campaign deploys both an XMRig Monero miner and a Gh0st RAT variant capable of extensive remote access and credential theft. Weak credentials, public database exposure, and enabled xp_cmdshell are the main weaknesses enabling the intrusion. How the ...