Analysis of MS-SQL Server Proxyjacking Cases

AhnLab Security Emergency response Center (ASEC) has recently discovered cases of proxyjacking targeting poorly managed MS-SQL servers. Publicly accessible MS-SQL servers with simple passwords are one of the main attack vectors used when targeting Windows systems. Typically, threat actors target poorly managed MS-SQL servers and attempt to gain access through brute force or dictionary attacks. If successful, they install malware on the infected system.

The threat actors have been installing LoveMiner on MS-SQL servers for quite some time, and their …

access ahnlab analysis asec attack attack vectors brute cases center emergency main malware analysis managed ms-sql passwords proxyjacking response security server servers simple sql sql server sql servers systems target targeting threat threat actors windows