Mallox Ransomware Exploits Weak MS-SQL Servers to Breach Networks

Mallox Ransomware Exploits Weak MS-SQL Servers to Breach Networks. Activities witnessed a 174% increase. Steals data before encrypting and threatens to publish on leak site to convince victims to pay ransom fee. Targets manufacturing, professional and legal services, and wholesale and retail sectors. Uses malicious OneNote file attachments for initial access. Executes PowerShell command to retrieve ransomware payload and deletes volume shadow copies before encryption process begins