MySQL Bots Attack Windows
Filed in: Open Source, Security — January 29th, 2005
A worm that takes advantage of administrators’ poor password choices has started spreading among database systems.
The malicious program, known as the “MySQL bot” or by the name of its executable code, SpoolCLL, infects computers running the Microsoft Windows operating system and open-source database known as MySQL, the Internet Storm Center said in an advisory published Thursday. Early indications suggest that more than 8,000 computers may be infected so far, said the group, which monitors network threats.
[ Read ]
Mitigation:
- Strong password
- Restricted root access
- Apply Firewall rule
Comments Feed
TrackBack URL
January 29th, 2005 at 11:23 am
A lot MySQL users have left the “root” user without password, and yet this is the user granted with highest accessibility by default