Categories: Data StorageDataBase

27,000 MongoDB Databases Suffer Ransomware Attack

Security researchers are warning of a widespread attack against the MongoDB database management system, which shows no sign of slowing.

The assaults reportedly began in December, but have surged in volume in the past couple of weeks and are now said to be impact 27,000 MongoDB installations.

The online extortionists reportedly replace the database with an empty database and demand a fee to return the data.

Ransomware Attacks

The ransomware attacks against vulnerable MongoDB installations, was initially only carried out by one hacker, but he or she has now been joined by a number of other groups according to Victor Gevers of the GDI Foundation, and Niall Merrigan, a Norwegian developer.

The poorly configured databases are reportedly either not password-protected or protected by weak passwords, and the extortionists are demanding one bitcoin each.

According to Gevers and Merrigan, these groups are attacking already compromised database, which means that the owners don’t know which group are responsible and who to pay the ransom to. And apparently the some attackers don’t even bother saving the database or making a copy of it, which means that some companies have permanently lost their data.

“Right now it’s bedlem,” Merrigan told Bleeping Computer. “Attackers are deleting each others’ ransoms as quick as they pop up.”

“It’s a very interesting case, and it’s like watching a gold rush at this point,” he added.

Silicon has approached MongoDB for comment but has not received a reply at the time of writing.

Significant Player

MongoDB is a popular open-source NoSQL database, widely used for big data and analytics, and has received significant levels of funding in the past.

It also has some big name users. For example the UK’s Met Office uses MongoDB to process huge amounts of data from outer space, turning it into useful space weather forecasts.

And eHarmony, a dating website that claims to process a billion potential matches daily, adopted MongoDB instead of a decentralised SQL database.

Last year Australian security researcher Troy Hunt warned that members of elite dating website BeautifulPeople.com had their personal details leaked and put up for sale online.

The data was obtained after an attack against a test server containing a MongoDB database.

Quiz: How well do you know open source software?

Read also : The Value of Data
Tom Jowitt

Tom Jowitt is a leading British tech freelancer and long standing contributor to Silicon UK. He is also a bit of a Lord of the Rings nut...

Recent Posts

UK’s CMA Readies Cloud Sector “Behavioural” Remedies – Report

Targetting AWS, Microsoft? British competition regulator soon to announce “behavioural” remedies for cloud sector

56 mins ago

Former Policy Boss At X Nick Pickles, Joins Sam Altman Venture

Move to Elon Musk rival. Former senior executive at X joins Sam Altman's venture formerly…

3 hours ago

Bitcoin Rises Above $96,000 Amid Trump Optimism

Bitcoin price rises towards $100,000, amid investor optimism of friendlier US regulatory landscape under Donald…

5 hours ago

FTX Co-Founder Gary Wang Spared Prison

Judge Kaplan praises former FTX CTO Gary Wang for his co-operation against Sam Bankman-Fried during…

6 hours ago