SQL Server, botnet and Cryptomining... is your SQL SERVER safe?
Hi Guys, Welcome back! Today we talk about security! Lately infact also SQL Server is used to execute malware and so exploiting their compute power to mine cryptocurrency! Are you ready to know if your SQL Server is safe? Introduction Yeah, this time attackers have sniffed the businnes: use Server in order to mine cryptocurrency such as Vollar and Monero! But How they do it? Anatomy of an attack! How they do it? Usually attackers gain the access to the targeted SQL Server databases by brute force method. (And so use wear password for the system administrator user is not a good idea...) Once attackers achieved the access with the sa user they apply changes to the database in order to allow command execution . Then simply download malware binaries and open multiple backdoor. Then remove traces of the malware activity and finally execute malware that execute the cryptomining procedure. The whole process told in this way seems simple enough and in fact it is! So fir...