Hackers Smuggle Post-Exploitation Toolkit Into Oracle Database Via Classic SQL Injection Flaw

Summary

Threat actors have successfully exploited a classic SQL injection vulnerability to gain access to an Oracle database. Once inside, they deployed a custom-built, database-resident toolkit, indicating a sophisticated post-exploitation strategy. Security firm Huntress identified the suspicious activity, highlighting the continued relevance of older vulnerabilities in enabling advanced attacks.

Entities