Product
MS-SQL
- First Reported
- Jul 24, 2026
- Latest Reported
- Aug 10, 2026
Reported Context (2)
- After penetrating a poorly managed MS-SQL server, the attacker used utilities such as PowerShell, bitsadmin, and Certui to install SoftEther VPN and is believed to have ultimately installed a web shell. Larva-26010 Targets Korean Web Servers to Install SoftEther VPN
- Case Study: Targeted Attack Case on an MS-SQL Server Involving the Installation of GotoHTTP and SoftEther VPN Larva-26009 Uses Remote-Access Tools and SoftEther VPN in MS-SQL Server Attacks
Malware (4)
Threat Actors (5)
MITRE ATT&CK (15)
Products (5)
Tools (17)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.