Threat actors are actively targeting internet-exposed MongoDB instances in large-scale automated ransomware campaigns. The attacks follow a consistent pattern: attackers scan for unsecured MongoDB databases accessible on the public internet, delete the stored data, and insert ransom notes demanding payment in Bitcoin. Recent evidence indicates these campaigns remain highly profitable despite modest ransom demands typically […] The post Hackers Attacking MongoDB Instances to Delete Database and Add Ransom Note appeared first on Cyber Security News.