Recently, there has been some news articles about unsolicited attacks on unsecured public facing Elastic and Mongo databases. These are commonly being called "Meow" attacks, resulting in entire databases being deleted without ransom or warning.
My question is:
- What is the nature of the attack (How is the database being targeted and/or exploited, and what is the impact of the attack? Is it just database deletion or is the server itself also compromised?)
- How can someone confirm they are at risk (their database is unsecured and public facing, i.e. are there default ports and/or credentials?)
- If someone has an exposed database, what steps can they take to protect it?