Support for Ukraine



Blog Archive



Hackers are selling more than 85,000 MySQL databases on a dark web portal

Full Story Blog Post Saturday, December 12, 2020 in Privacy   View No Comments No Comments
Privacy
NAMEHackers break into databases, steal their content, hold it for ransom for 9 days, and then sell to the highest bidder if the DB owner doesn't want to pay the ransom demand.

More than 85,000 MySQL databases are currently on sale on a dark web portal for a price of only $550/database.

The portal, brought to ZDNet's attention earlier today by a security researcher, is part of a database ransom scheme that has been going on since the start of 2020.

Hackers have been breaking into MySQL databases, downloading tables, deleting the originals, and leaving ransom notes behind, telling server owners to contact the attackers to get their data back.

While initial ransom notes asked victims to contact the attackers via email, as the operation grew throughout the year, the attackers also automated their DB ransom scheme with the help of a web portal, first hosted online at sqldb.to and dbrestore.to, and then moved an Onion address, on the dark web.

www.zdnet.com