An active campaign in early October 2026 that targets Internet-facing Microsoft SQL Server instances. The entry point is dllhost.exe, a Go binary packed with UPX that embeds the open-source Naabu v2 port scanner. It requests a target range from hxxp://site.vietnam852[.]com:88/ip.php and converts the returned address into a hardcoded /16 CIDR block. Naabu then sends TCP […]
This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Read the original article:
Hackers Hijack Microsoft SQL Servers Using T-SQL Commands to Install Gh0st RAT and Crypto Miners