"PLEASE_READ_ME Ransomware Attacks 85K MySQL Servers"

Researchers are warning of an active ransomware campaign that is targeting MySQL database servers.  MySQL is an open-source relational database management system.  The ransomware is called PLEASE_READ_ME, and has so far breached at least 85,000 servers worldwide, and has posted at least 250,000 stolen databases on a website to sell.  The attack exploits weak credentials on internet-facing MySQL servers, of which there are close to 5 million worldwide.  Since the researchers first observed the ransomware campaign in January, the attackers have switched up their techniques to put more pressure on victims and to automate the payment process for the ransom.

Threatpost reports: "PLEASE_READ_ME Ransomware Attacks 85K MySQL Servers"

Submitted by Anonymous on