MySQL.com Sold for $3k, Serves Malware
Summary: Security firm Armorize reported that mysql.com, the central repository for MySQL database software owned by Oracle, was hacked and injected with a script that silently redirected visitors to a site hosting the BlackHole exploit pack, which installs malware without any user click. A hacker using the nickname "sourcec0de" had offered root access to the site for $3,000 on a Russian cybercrime forum on Sept. 21, advertising its roughly 12 million monthly and nearly 400,000 daily visitors, and Armorize's Wayne Huang said the infection appeared to have been injected within the prior seven hours, long enough for about 120,000 users to browse the site.
Key Takeaway: A site with nearly 400,000 daily visitors was booby-trapped for roughly seven hours, and the access that made it possible was advertised for $3,000 — a reminder that the price of entry for a high-traffic compromise can be startlingly low.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026