MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
bleepingcomputer.com
MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
1–10 of 17 posts
Re: MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
#2 "hackers have now hit around 10,500 MongoDB servers. That's about 25% of all MongoDB databases accessible via the Internet. The attacks don't target all MongoDB databases, but only those left accessible via the Internet and without a password on the administrator account."
25% of mongodb installs externally accessible lack a fucking password on the admin account.
They deserve it. Maybe it will teach them something.
Re: MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
#3"hackers have now hit around 10,500 MongoDB servers. That's about 25% of all MongoDB databases accessible via the Internet. The attacks don't target all MongoDB databases, but only those left accessible via the Internet and without a password on the administrator account." 25% of mongodb installs externally accessible lack a fucking password on the admin account. They deserve it. Maybe it will teach them something.
So it's a problem that Mongo can't handle dumb ass admins? Yeah Mongo, you suck!
Re: MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
#4"hackers have now hit around 10,500 MongoDB servers. That's about 25% of all MongoDB databases accessible via the Internet. The attacks don't target all MongoDB databases, but only those left accessible via the Internet and without a password on the administrator account." 25% of mongodb installs externally accessible lack a fucking password on the admin account. They deserve it. Maybe it will teach them something.
I agree with you, but to me it is a problem that goes back to the people who made the decision of allowing admin accounts without a password. In a world where software stacks have multiple applications, programming languages and databases, it happens that people are not experts in everything. They make mistakes. Then there is a huge pool of companies who have poorly skilled devs coming from the Wordpress/Drupal/Prestashop/Etc background who many times don't actually know anything about security.
Then there is the fact that MongoDB is known for having a very bad reputation among software engineers. I could personally write down many horror stories that I experienced myself, plus all the things you get to hear from friends and tech blogs.
Maybe after this attack some companies ban it from their software stacks. I really hope they do so. The world would be a better place without MongoDB.
Re: MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
#5"hackers have now hit around 10,500 MongoDB servers. That's about 25% of all MongoDB databases accessible via the Internet. The attacks don't target all MongoDB databases, but only those left accessible via the Internet and without a password on the administrator account." 25% of mongodb installs externally accessible lack a fucking password on the admin account. They deserve it. Maybe it will teach them something.
So it's a problem that Mongo can't handle dumb ass admins? Yeah Mongo, you suck!
There is a thing in software that is called "sane defaults". Some of the best software tools in existence are a mix of a solid base AND sane defaults. If you have a crappy base and dubious defaults, your software probably sucks.
Re: MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
#6Why do so many MongoDB installation lack a password on the Admin account?
I tried search for me info, but could find anything. Was this the default? Procedure given in a popular tutorial? It seems pretty insane.
Re: MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
#7"hackers have now hit around 10,500 MongoDB servers. That's about 25% of all MongoDB databases accessible via the Internet. The attacks don't target all MongoDB databases, but only those left accessible via the Internet and without a password on the administrator account." 25% of mongodb installs externally accessible lack a fucking password on the admin account. They deserve it. Maybe it will teach them something.
> They deserve it. Maybe it will teach them something.
My thoughts exactly.
Re: MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
#8Why do so many MongoDB installation lack a password on the Admin account? I tried search for me info, but could find anything. Was this the default? Procedure given in a popular tutorial? It seems pretty insane.
It was the default for at least a year I think. They changed the defaults, but that didn't impact any existing default configs...
Re: MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
#9"hackers have now hit around 10,500 MongoDB servers. That's about 25% of all MongoDB databases accessible via the Internet. The attacks don't target all MongoDB databases, but only those left accessible via the Internet and without a password on the administrator account." 25% of mongodb installs externally accessible lack a fucking password on the admin account. They deserve it. Maybe it will teach them something.
I agree with you, but to me it is a problem that goes back to the people who made the decision of allowing admin accounts without a password. In a world where software stacks have multiple applications, programming languages and databases, it happens that people are not experts in everything. They make mistakes. Then there is a huge pool of companies who have poorly skilled devs coming from the Wordpress/Drupal/Prest…
> it is a problem that goes back to the people who made the decision of allowing admin accounts without a password.
No. Just.. no.... Security of YOUR system is YOUR responsibility.
> In a world where software stacks have multiple applications, programming languages and databases, it happens that people are not experts in everything.
Hire one.
> Maybe after this attack some companies ban it from their software stacks.
Or maybe decision makers realise that yes, you do need to pay for skills.
Re: MongoDB Apocalypse Is Here as Ransom Attacks Hit 10,000 Servers
#10The same story on Ars has had a bit more traction (120+ comments).