Cyberscum have been targeting MS-SQL boxen – and some careless sysadmins got reinfected after cleaning it out
DRANK
Two year campaign observed by Guardicore
Two year campaign observed by Guardicore