The Ransomware Chronicles: A DevOps Survival Guide | Rapid7 Blog
Tags
attack-pattern: Data Credentials - T1589.001 Ip Addresses - T1590.005 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID bfddcb06-d879-4c55-ac19-d8ae7cc25d61
Fingerprint b70002d320811bcf
Analysis status DONE
Considered CTI value -2
Text language
Published Jan. 30, 2017, 3:04 p.m.
Added to db Jan. 18, 2023, 8:47 p.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline The Ransomware Chronicles: A DevOps Survival Guide
Title The Ransomware Chronicles: A DevOps Survival Guide | Rapid7 Blog
Detected Hints/Tags/Attributes 33/1/21
Source URLs
Redirection Url
Details Source https://blog.rapid7.com/2017/01/30/the-ransomware-chronicles-a-devops-survival-guide/
URL Provider
Details Provider Source level domain
Details rapid7.com blog.rapid7.com
Attributes
Details Type #Events CTI Value
Details Domain 622 
en.wikipedia.org
Details Domain 175 
www.zdnet.com
Details Domain 31 
www.pcworld.com
Details Domain 1 
sonar.labs.rapid7.com
Details Domain 8 
www.digitalocean.com
Details Domain 2 
docs.couchdb.org
Details Domain 101 
www.elastic.co
Details Domain 2 
docs.mongodb.com
Details Domain 38 
rapid7.com
Details File 1 
hit-exposed-elasticsearch-clusters.html
Details File 1 
-couchdb-and-hadoop-databases.html
Details File 64 
security.html
Details Url 1 
https://en.wikipedia.org/wiki/devops
Details Url 1 
http://www.zdnet.com/article/mongodb-ransacked-now-27000-databases-hit-in-mass-r
Details Url 1 
http://www.pcworld.com/article/3157417/security/after-mongodb-ransomware-groups-
Details Url 1 
http://www.pcworld.com/article/3159527/security/attackers-start-wiping-data-from
Details Url 1 
http://sonar.labs.rapid7.com
Details Url 1 
https://www.digitalocean.com/community/tutorials/how-to-securely-configure-a-pro
Details Url 1 
http://docs.couchdb.org/en/2.0.0/intro/security.html
Details Url 1 
https://www.elastic.co/blog/found-elasticsearch-security
Details Url 1 
https://docs.mongodb.com/manual/security