Trigona Ransomware Deployed Through Vulnerable Microsoft SQL Servers

Attackers are breaking into Microsoft SQL (MS-SQL) servers to install Trigona ransomware payloads and encrypt all files. These servers are not well protected and are exposed to the Internet. By using account credentials that are simple to guess, brute-force or dictionary attacks are being used to access the MS-SQL servers. After successfully connecting to a […]

The post Trigona Ransomware Deployed Through Vulnerable Microsoft SQL Servers appeared first on Heimdal Security Blog.

access account attackers attacks blog brute brute-force credentials cybersecurity news encrypt exposed files heimdal security install internet microsoft microsoft sql microsoft sql servers ms-sql ransomware security security blog servers simple sql sql servers trigona trigona ransomware vulnerable