Security researchers from the security firm GuardiCore Labs Security have discovered multiple hacking campaigns conducted by a Chinese criminal gang targeting database servers. The attackers targeted systems worldwide for mining cryptocurrencies, exfiltrating sensitive data and building a DDoS botnet. Experts observed thousands of cyber attacks in recent months and identified at least three attack schemes, Hex, Hanako, and Taylor, targeting MS SQL and MySQL servers running on both Windows and Linux machines. The researchers noticed that attackers used nearly all the machine for one month before rotate out of use, evidence suggests that the attack group is based in China.”]
Source: https://securityaffairs.co/wordpress/67006/cyber-crime/database-servers.html