New ‘Meow’ attack has deleted almost 4k unsecured databases
bleepingcomputer.com
New ‘Meow’ attack has deleted almost 4k unsecured databases
1–10 of 544 posts
Re: New ‘Meow’ attack has deleted almost 4k unsecured databases
#2Re: New ‘Meow’ attack has deleted almost 4k unsecured databases
#3For those that want to go deep link diving. 'Meow, I'm a Cat'.
Re: New ‘Meow’ attack has deleted almost 4k unsecured databases
#4Or 'Meow, I'm a Frog'
Re: New ‘Meow’ attack has deleted almost 4k unsecured databases
#5Somehow I feel good about this. The article claims nothing good can come of deleting exposed databases, but I strongly disagree - I'd by far rather my data be deleted than stolen and shared. If the owner doesn't have proper backups AND can't secure a database, they have no business hosting such data, period. IMHO.
Re: New ‘Meow’ attack has deleted almost 4k unsecured databases
#6Somehow I feel good about this. The article claims nothing good can come of deleting exposed databases, but I strongly disagree - I'd by far rather my data be deleted than stolen and shared. If the owner doesn't have proper backups AND can't secure a database, they have no business hosting such data, period. IMHO.
agreed.
Re: New ‘Meow’ attack has deleted almost 4k unsecured databases
#7How does this work?
Will it affect MySQL databases accessible from the Internet but secured with a long random password?
Re: New ‘Meow’ attack has deleted almost 4k unsecured databases
#8Somehow I feel good about this. The article claims nothing good can come of deleting exposed databases, but I strongly disagree - I'd by far rather my data be deleted than stolen and shared. If the owner doesn't have proper backups AND can't secure a database, they have no business hosting such data, period. IMHO.
Could be both
Re: New ‘Meow’ attack has deleted almost 4k unsecured databases
#9How does this work? Will it affect MySQL databases accessible from the Internet but secured with a long random password?
No. The bot targets only unsecured Elastic databases, i.e. ones where no credentials are necessary to execute queries.
Re: New ‘Meow’ attack has deleted almost 4k unsecured databases
#10How does this work? Will it affect MySQL databases accessible from the Internet but secured with a long random password?
Don't expose MySQL databases to the internet. Just don't. Stick an API layer in at the very least with key based auth, and only the bare minimum capabilities allowed for the user.
That said, if you'd read the article you'd see that so far only unsecured MongoDB, Elasticsearch and Redis installations are being attacked so far.