Over 12,000 MongoDB Databases Deleted by Unistellar Attackers

guest · May 17, 2019

Over 12,000 MongoDB Databases Deleted by Unistellar Attackers
May 17, 2019
https://www.bleepingcomputer.com/ne...db-databases-deleted-by-unistellar-attackers/

Over 12,000 unsecured MongoDB databases have been deleted over the past three weeks, with only a message left behind asking the owners of the databases to contact the cyber-extortionists to have the data restored.

Although not on this scale, these types of attacks targeting publicly accessible MongoDB databases have happened since at least early-2017 [1, 2, 3, 4]. Attackers looking for exposed database servers using BinaryEdge or Shodan search engines delete them and demand a ransom for their 'restoration services'.
The contact notes left behind
The 12,564 unprotected MongoDB databases wiped by Unistellar were found by the researcher using BinaryEdge (Shodan reports a smaller number of 7,656 databases, probably because of blocked queries)
While the method used by the attackers to find and wipe databases in such large numbers is not yet known, the entire process is most probably completely automated.
Click to expand...

Log in or Sign up

Over 12,000 MongoDB Databases Deleted by Unistellar Attackers

guest Guest

Log in or Sign up

Over 12,000 MongoDB Databases Deleted by Unistellar Attackers

guest Guest

Useful Searches