Professional Ransomware Group Gets Involved,Infections Reach 28K MongoDB Servers
bleepingcomputer.com
Professional Ransomware Group Gets Involved,Infections Reach 28K MongoDB Servers
1–4 of 4 posts
Re: Professional Ransomware Group Gets Involved,Infections Reach 28K MongoDB Servers
#2I'm not clear on why people would be exposing MongoDB on a public address?
This habit of database-like software (does Redis still not offer authentication?) treating authentication/authorization as a second-class citizen is odd.
I guess it has proven to be webscale though [1].
Re: Professional Ransomware Group Gets Involved,Infections Reach 28K MongoDB Servers
#3I'm not clear on why people would be exposing MongoDB on a public address? This habit of database-like software (does Redis still not offer authentication?) treating authentication/authorization as a second-class citizen is odd. I guess it has proven to be webscale though [1]. [1] https://www.youtube.com/watch?v=b2F-DItXtZs
Redis has offered simple authentication for some time:
https://redis.io/commands/auth
Redis generally isn't put forth a first-class member of a popular stack and featured in getting started tutorials in the same way that MongoDB has been.
Re: Professional Ransomware Group Gets Involved,Infections Reach 28K MongoDB Servers
#4I'm not clear on why people would be exposing MongoDB on a public address? This habit of database-like software (does Redis still not offer authentication?) treating authentication/authorization as a second-class citizen is odd. I guess it has proven to be webscale though [1]. [1] https://www.youtube.com/watch?v=b2F-DItXtZs
[deleted]