Hackers Abuse Microsoft SQL Servers to Deploy Monero Miner and Gh0st RAT

Attackers are brute-forcing exposed Microsoft SQL Server installations and abusing T-SQL commands to deploy a Monero miner and the Gh0st RAT remote access trojan. Fortinet discovered the campaign, which combines port scanning and password guessing against internet-facing servers.