Threat Actors Continuously Attacking MS-SQL Servers to Deploy ICE Cloud Scanner

A persistent threat actor known as Larva-26002 has been continuously targeting poorly managed Microsoft SQL (MS-SQL) servers, this time deploying a new scanner malware called ICE Cloud Client. The campaign has been active since at least January 2024 and continues into 2026, with the attacker upgrading their tools with every cycle. What started as a […]

The post Threat Actors Continuously Attacking MS-SQL Servers to Deploy ICE Cloud Scanner appeared first on Cyber Security News.