Security researcher Victor Gevers is urging administrators to check their MongoDB installations after finding nearly two hundred of them wiped and being held for ransom. More than 100TB of data has been deleted from targeted MongoDB installs, according to John Matherly, the founder of Shodan and one of the researchers who has been following these attacks. As of 1/8/2017 the total count of compromised databases has risen to 27,663 based on the counts in the tracker. MongoDB has acknowledged the issue, and posted advice on their blog for administrators.”]
Source: https://www.csoonline.com/article/3154190/exposed-mongodb-installs-being-erased-held-for-ransom.html