Hackers hijack Microsoft SQL Servers to deploy Gh0st RAT and Monero miners

Microsoft SQL Server is widely used in enterprise environments, and internet-facing installations become part of the attack surface when they are left exposed. The FortiGuard Labs report places this activity in the context of server compromise rather than a blockchain-specific flaw, with Monero mining software and Gh0st RAT appearing on the same machines. For operators, the story is about hardening database access, credentials, and configuration before an exposed server becomes a foothold.

Monero mining on hijacked servers turns spare compute into an asset for attackers while the presence of remote-access malware creates a second layer of risk. In practice, that means victims can lose resources and also face ongoing machine control if the compromise is not detected quickly. The mix of mining and remote access shows how a single intrusion can be used for both extraction and persistence.

The case sits at the intersection of infrastructure security and cryptocurrency abuse, where attackers use ordinary business systems to run mining code rather than targeting a coin protocol itself. That tension matters because it shifts attention from market narratives to basic system hygiene, and it shows how crypto-linked tooling can be folded into broader cybercrime. It also underlines that Monero’s privacy features are only one part of the story; the immediate issue here is compromised enterprise servers.

Total crypto marketall crypto assets combined no single asset in the event: read against the whole market

The total crypto market fell 0.5% in the 4 hours after the first headline, after rising 0.2% in the 2 hours before.

44 prices, one every 30 minutes