Trigona Ransomware Deployed Through Vulnerable Microsoft SQL Servers

Attackers are breaking into Microsoft SQL (MS-SQL) servers to install Trigona ransomware payloads and encrypt all files. These servers are not well protected and are exposed to the Internet. By using account credentials that are simple to guess, brute-force or dictionary attacks are being used to access the MS-SQL servers. After successfully connecting to a […]

The post Trigona Ransomware Deployed Through Vulnerable Microsoft SQL Servers appeared first on Heimdal Security Blog.