Analysis of TargetCompany’s Attacks Against MS-SQL Servers (Mallox, BlueSky Ransomware)

While monitoring attacks targeting MS-SQL servers, AhnLab SEcurity intelligence Center (ASEC) recently identified cases of the TargetCompany ransomware group installing the Mallox ransomware. The TargetCompany ransomware group primarily targets improperly managed MS-SQL servers to install the Mallox ransomware. While these attacks have been ongoing for several years, here we will outline the correlation between the newly identified malware and previous attack cases involving the distribution of the Tor2Mine CoinMiner and BlueSky ransomware.

Similar to previous cases, this attack targeted improperly …

ahnlab analysis asec attacks bluesky bluesky ransomware cases center install intelligence mallox mallox ransomware malware analysis managed monitoring ms-sql ransomware ransomware group security security intelligence servers sql sql servers targetcompany targeting