An active campaign in early October 2026 that targets Internet-facing Microsoft SQL Server instances. The entry point is dllhost.exe, a Go binary packed with UPX that embeds the open-source Naabu v2 port scanner. It requests a target range from hxxp://site.vietnam852[.]com:88/ip.php and converts the returned address into a hardcoded /16 CIDR... Weiterlesen: Hackers Hijack Microsoft SQL Servers Using T-SQL Commands to Install …
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Hijack Microsoft SQL Servers Using T-SQL Commands to Install Gh0st RAT and Crypto Miners
An active campaign in early October 2026 that targets Internet-facing Microsoft SQL Server instances. The entry point is dllhost.exe, a Go binary packed with…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Intelligence Digest — free The top security news daily · unsubscribe anytime