Hackers Attacking MongoDB Instances to Delete Database and Add Ransom Note

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Automated Ransomware Campaigns Target MongoDB Instances Threat actors are conducting large-scale ransomware attacks on unsecured MongoDB instances. These attacks involve scanning for publicly accessible databases, deleting their contents, and placing ransom notes demanding Bitcoin payments. The campaigns are reported to be highly profitable despite relatively low ransom demands. 13 sources 31