MYSQL SERVERS TARGETED BY DDOSTF BOTNET

Summary from the TLDR InfoSec newsletter

The Ddostf botnet is targeting MySQL servers for use in its DDOS-as-a-Service platform. The botnet is gaining access by brute-forcing weak admin credentials and then installing User Defined Functions to act as a C2 server for use in the botnet.