The analysis team has categorized attacks on MS-SQL and MySQL servers installed on Windows systems during Q2 2025. While the number of targeted systems remains stable, attacks on MS-SQL servers have been decreasing. MySQL servers saw a significant spike in attacks in June 2025. The report provides detailed statistics on attack trends, including graphs illustrating the attack status for both server types. It also includes a list of MD5 hashes, URLs, FQDNs, and IP addresses associated with the malicious activities. The analysis covers various types of malware and tools used in these attacks, ranging from backdoors and miners to ransomware and remote access trojans. Author: AlienVault
Related Tags:
attack statistics
mykings
clrshell
ahnlab smart defense
juicypotato
q2 2025
server security
shadowforce
database
Associated Indicators:
3389A0A7E2F8BEE5FE7B4A9D8E45D75C6E3B75AF5CEC244EBDFB36699D29D89D
046C011BBF14FA5D187BD4D5AC2A7CF1317F103AE2BA46769A451ADD5735C8E8
960EFB1F961CE6C8FBD4DFB09BA76F32882A5225
A56CCF64692EDCA0C60A68E0C374E23D13CE0111
93100BA55FCBB8E572AD231EEC24E02FA744244A
3EE3A5FEF87B72A024BD0F45E6F6039F
33096E0BC0785FFB2094054BEBB9BE26
2CD59CFF23A2E0F98E710BF52B799154
9D098864BC5746B9FF00432686D59B9F