An active campaign in early October 2026 that targets Internet-facing Microsoft SQL Server instances. The entry point is dllhost.exe, a Go binary packed with UPX that embeds the open-source Naabu v2 port scanner. It requests a target range from hxxp://site.vietnam852[.]com:88/ip.php and converts the returned address into a hardcoded /16 CIDR... Weiterlesen: Hackers Hijack Microsoft SQL Servers Using T-SQL Commands to Install …
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Hijack Microsoft SQL Servers Using T-SQL Commands to Install Gh0st RAT and Crypto Miners
An active campaign in early October 2026 that targets Internet-facing Microsoft SQL Server instances. The entry point is dllhost.exe, a Go binary packed with…
Hacking & Pentesting GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0011 · T1071
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1071TA0011 · Command and Control
Application Layer Protocol (C2)
Mitigation: M1031 Network Intrusion Prevention & Egress Filtering
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 80%
Egress-Filtering einführen, DNS-Monitoring aufrichten, Netzwerk-Logs nach C2-Beacon-Mustern durchsuchen.
T1595TA0007 · Discovery
Active Scanning
Mitigation: M1056 Pre-compromise
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 72%
Eigene Angriffsfläche regelmäßig extern scannen, Attack-Surface-Monitoring aufrichten, offene Ports schließen.
Discovery
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
32 Quellen
Nvidia CEO Jensen Huang resigns in disgrace
31 weitere Quellen
TThe Mac Observervor 1 TagJensen Huang Resigns as Nvidia CEO After 33 Years Amid Growing Scandal TThe Mac Observervor 1 TagNvidia Stock Plunges After Jensen Huang Resigns as CEO, What’s Next? TThe Mac Observervor 1 TagNvidia Stock Crashes 10% to $156 After Jensen Huang Resigns as CEO TThe Mac Observervor 17 Std.Jensen Huang Reportedly Had Third Affair With Another Nvidia Employee TThe Mac Observervor 17 Std.Jensen Huang’s Last Hours at Nvidia: ‘I’m a Piece of Sh–’ TThe Mac Observervor 14 Std.Nvidia Stock Falls After Jensen Huang Resigns, With Earnings Just Days Away
+25
11 Quellen
This Sony Bravia TV just hit a record-low $1,100 off ahead of Black Friday
10 weitere Quellen
ZZDNETvor 1 TagVerizon will give you a free iPhone 18 Pro, Apple Watch, and AirPods for Black Friday – how to qualify ZZDNETvor 1 TagBest early Black Friday Garmin Watch deals: The top 4 I’d consider buying now ZZDNETvor 5 Std.Best early Black Friday deals under $25: Gadgets we love ZZDNETvor 4 Std.This 2TB WD Black SSD is 50% off at Best Buy ahead of Black Friday AApfelpagevor 8 Std.Black Friday bei pCloud: 3-in-1-Lifetime-Bundle für Mac und iPhone mit 62 % Rabatt Aappgefahren.devor 13 Std.Nie wieder Cloud-Abo: pCloud Lifetime ist zum Black Friday bis zu 62 Prozent günstiger
+4
10 Quellen
HomeView: Apple erklärt, wie Secure Exclaves Kamera- und Mikrofondaten abschotten
9 weitere Quellen
MMacerkopf.devor 10 Std.Apple TV 4K (4. Generation) und Apple HomeView feiern heute ihren Verkaufsstart Aappgefahren.devor 8 Std.Funktioniert Apple HomeView auch in Deutschland? AAppleInsider Newsvor 1 TagApple HomeView review: Shallow launch, but incredible potential AAppleInsider Newsvor 11 Std.First HomeView and Apple TV 4K pre-orders are arriving AAppleInsider Newsvor 7 Std.Designing HomeView was a hard but fun journey, says Apple MMacStoriesvor 1 TagApple HomeView Review Roundup: Simple, Charming, and Built for Apple Users
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4336531/hacking-pentesting/hackers-hijack-microsoft-sql-servers-using-t-sql-commands-to-install-gh0st-rat-and-crypto-miners/