Tag: credential stuffing

2 Attack Reports | 0 Vulnerabilities

Attack reports

Q1 2026 Malware Statistics Report for Windows Database Servers

During the first quarter of 2026, Windows-based MS-SQL and MySQL database servers experienced consistent malicious attacks with a temporary decrease in February before rising again in March. The primary threat actor, Larva-26002, leveraged various utilities including BCP, curl, bitsadmin, and Power…
coinminer
credential stuffing
gh0strat
netcat
mysql
database servers
brute force
ms-sql
dictionary attack
juicypotato
shadowforce
clrshell
mykings
loveminer
2026-04-14
ice cloud
scanner
Published: April 14, 2026
Downloadable IOCs: 4

Inside BRUTED: Black Basta (RaaS) Used Automated Brute Forcing Framework to Target Edge Network Devices

Black Basta, a ransomware-as-a-service group, has been using an automated brute forcing framework called BRUTED to target edge network devices since 2023. The framework performs internet scanning and credential stuffing against firewalls and VPN solutions in corporate networks. Black Basta prioriti…
ransomware
cobalt strike
black basta
vpn
esxi
brute ratel
raas
edge devices
brute-force
firewall
2025-03-17
credential-stuffing
edge-devices
bruted
2025-04-16
Published: April 16, 2025
Downloadable IOCs: 18
Click here to see more Attack Reports