Ddostf DDoS Botnet Malware Targets MySQL Servers

The Ddostf malware botnet is targeting MySQL servers to run a DDoS-as-a-Service platform. According to researchers at ASEC, the operators leverage software vulnerabilities or brute-force weak administrator account credentials to gain access and perform tasks such as downloading payloads and executing system-level commands. As a countermeasure, cybersecurity experts advise MySQL administrators to regularly update their servers and use strong and unique passwords to protect against brute force and dictionary attacks.