Skip to main content
Security Performance Management
Continuous Monitoring
Vendor Risk Management
Cyber Insurance
National Cybersecurity

Open Ports: MongoDB and ElasticSearch

Ingrid

Over 28,000 MongoDB[1] servers running with default credentials have been accessed by hackers. Some had their data stolen and ransomed[2].

Over 600 Elasticsearch[3] instances with guessable passwords have had data copied and erased[4] in this manner.

To see if a company in your portfolio is vulnerable to these attacks, go to your portfolio and use the Open Port filter in your search.

Resources

  1. Threat Post, “MongoDB Attacks Jump From Hundreds to 28,000 In Just Days”
  2. The Register, “MongoDB ransom attacks soar, body count hits 27,000 in hours”
  3. Bleeping Computer, “MongoDB Hijackers Move on to ElasticSearch Servers”
  4. The Register, “MongoDB hackers now sacking ElasticSearch”
February 15, 2017: Published.

Related articles

Feedback

0 comments

Please sign in to leave a comment.