Thousands of Microsoft Servers Infected by Crypto-Mining Botnet Since 2018, Says Report

A malicious botnet has been targeting Microsoft SQL database servers to mine cryptocurrency for two years, according to a new report.

Guardicore Labs said Wednesday that in the last several weeks alone, the hackers had managed to infect close to 2,000 to 3,000 servers daily. As reported by Hacker News, the botnet has been dubbed “Vollgar” after the vollar cryptocurrency it mines alongside monero (XMR), and its “vulgar” way of operating.

The attack brute-forces passwords in order to access servers with poor security. Once in, it executes configuration changes allowing the hackers to run malicious commands and download malware binaries.

Entities across health care, aviation, IT, telecoms and education in China, India, South Korea, Turkey and the U.S. have all been affected, according to the report.

The network of compromised computers was used to host all of the attackers infrastructure, with its primary command-and-control server based in China, according to Guardicore. That itself…