Ransomware groups have wiped data from MongoDB databases and Elasticsearch clusters. Researchers are now observing similar destructive attacks hitting openly accessible Hadoop and CouchDB deployments. The number of wiped CouchDB databases is also growing rapidly, reaching more than 400 so far. The attacks are accompanied by ransom messages, with attackers asking for 0.1 bitcoins (around $100) to return the data. Researchers have put together spreadsheets on Google Docs documenting the different attack signatures and messages left behind after data gets wiped.”]

