Tag: juicypotato

2 Attack Reports | 0 Vulnerabilities

Attack reports

XiebroC2 Identified in MS-SQL Server Attack Cases

A recent attack on a poorly managed MS-SQL server involved the use of XiebroC2, an open-source C2 framework similar to CobaltStrike. The attackers exploited vulnerable credentials, installed JuicyPotato for privilege escalation, and then deployed XiebroC2 using PowerShell. XiebroC2 supports various…
coinminer
privilege escalation
brute force
c2 framework
ms-sql
dictionary attack
juicypotato
2025-10-01
xiebroc2
Published: October 1, 2025
Downloadable IOCs: 3

Statistics Report on Malware Targeting Windows Database Servers in Q2 2025

The analysis team has categorized attacks on MS-SQL and MySQL servers installed on Windows systems during Q2 2025. While the number of targeted systems remains stable, attacks on MS-SQL servers have been decreasing. MySQL servers saw a significant spike in attacks in June 2025. The report provides …
windows
coinminer
anydesk
remcos
gh0strat
cobaltstrike
netcat
mysql
database
ms-sql
2025-08-08
juicypotato
hploader
shadowforce
server security
q2 2025
ahnlab smart defense
clrshell
mykings
attack statistics
loveminer
Published: August 8, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports