RE#TURGENCE: A Deep Dive into Turkish Hackers’ Campaign Targeting MSSQL Servers

Financially motivated Turkish threat actors have emerged with a significant development in cyber threats, introducing a new campaign named “RE#TURGENCE”. This campaign exploits MSSQL servers to deliver the MIMIC ransomware across the US, EU, and LATAM regions.

RE#TURGENCE primarily aims to gain initial access through MSSQL database servers. The attack strategy involves two potential outcomes: selling access to compromised hosts or deploying ransomware payloads. This pattern was revealed following a significant operational …

across the us campaign cyber cyber threats deep dive development dive exploits hackers latam mimic mssql mssql servers ransomware servers targeting threat threat actors threats