Wednesday, September 24, 2008

SQL DB? No firewall? Weak admin password? That is a trojan coming your way alright

SQL DB? No firewall? Weak admin password? That is a trojan coming your way alright
According to the Symantec Security Response Blog, a new trojan called Trojan.Eskiuel is going around infiltrating SQL servers and causing havoc:


This time we have found a new SQL threat: Trojan.Eskiuel. The main functionality of this threat is to scan the Internet to find machines with poorly configured SQL servers (i.e. with weak or non-existing passwords), gain access to them, and use their stored procedures in order to download new malware from a remote host.


Check your servers...

No comments: