Attackers hid malware inside Oracle Database — a SQL injection breach that went native
Attackers hid malware inside Oracle Database — a SQL injection breach that went native Huntress researchers documented a campaign where the Oracle database itself became the malware host. Threat actors exploited a SQL injection flaw in a public-facing application, then used Oracle’s embedded Java Virtual Machine to upload, compile, and execute a custom post-exploitation toolkit…