A sophisticated threat activity cluster, STAC6451, has been identified targeting Microsoft SQL servers. This cluster, primarily observed by Sophos Managed Detection and Response (MDR) teams, has compromised organizations by exploiting SQL server vulnerabilities. The attackers have been using a combination of brute-force attacks, command execution, and lateral movement techniques to infiltrate and compromise networks. This … Continue reading STAC6451 Hacker Hijacking Microsoft SQL Servers to Compromise Organizations