Hackers Are Selling More Than 85,000 MySQL Databases On a Dark Web Portal

An anonymous Slashdot reader writes:

For the past year, hackers have been breaking into MySQL databases, downloading tables, deleting the originals, and leaving ransom notes behind, telling server owners to contact the attackers to get their data back. If database owners don’t respond and ransom their data back in nine days, the databases are then put up on auction on a dark web portal.

More than 85,000 MySQL databases are currently on sale on a dark web portal for a price of only $550/database,” reports ZDNet:This suggests that both the DB intrusions and the ransom/auction web pages are automated and that attackers don’t analyze the hacked databases for data that could contain a higher concentration of personal or financial information. Signs of these ransom attacks have been piling up over the course of 2020, with the number of complaints from server owners finding the ransom note inside their databases popping up on Reddit, the MySQL forums, tech support forums, Medium posts, and private blogs.

7 Likes