Defending against database ransomware attacks
wiz.io | incident | #cloud-security | #ransomware | #misconfiguration | #extortion | #database-security | #threat-research
Summary
Wiz examines 'malware-less' database ransomware: exposed MySQL, PostgreSQL and MongoDB servers with weak auth are looted, wiped and ransomed via native commands — no malware to detect.
- Published
- Collected
--- id: 6964 title: "Defending against database ransomware attacks" source_domain: wiz.io source_url: "https://www.wiz.io/blog/database-ransomware-research" published_at: "2025-10-06T13:09:13Z" tags: ["cloud-security", "ransomware", "misconfiguration", "extortion", "database-security", "threat-research"] phying_url: "https://phying.com/item/6964" lang: en --- # Defending against database ransomware attacks ## Summary Wiz examines 'malware-less' database ransomware: exposed MySQL, PostgreSQL and MongoDB servers with weak auth are looted, wiped and ransomed via native commands — no malware to detect. ## Intelligence Metadata - **Sources:** wiz.io - **Published:** 2025-10-06T13:09:13Z - **Original:** https://www.wiz.io/blog/database-ransomware-research - **Phying News:** https://phying.com/item/6964