Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel

Hackers Hijacked An Airline's SQL Server For Credentials

ThreatMon researchers found an exposed attacker staging server showing how a compromised Microsoft SQL Server at a Viva Aerobus-linked environment was used to run commands and move stolen files.

Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel

Hackers turned a Microsoft SQL Server into a channel for running commands and moving collected files in an intrusion linked to a Viva Aerobus environment. Their own publicly accessible server then exposed attack tools and stolen material to unrelated internet users. The activity, observed between September 25 and 29, 2026, involved credential harvesting, source code […]

Exposed Hacker Server Reveals Toolkit Used in Viva Aerobus-Linked Intrusion

A publicly exposed attacker staging server has provided a rare, detailed view of a Microsoft SQL Server-focused intrusion linked to a Viva Aerobus-side… Read more →