The account Admin@kremlin.ru has been found in thousands of MongoDB databases

Dutch security researcher Victor Gevers stated that he discovered the Kremlin's hand via the administrative account Admin@kremlin.ru in over 2000 open MongoDB databases belonging to Russian and even Ukrainian organizations.

The account Admin@kremlin.ru has been found in thousands of MongoDB databases

Among the discovered open MongoDB databases were the databases of Walt Disney Russia, Stoloto, TTK-Northwest, and even the Ministry of Internal Affairs of Ukraine.

The account Admin@kremlin.ru has been found in thousands of MongoDB databases
The account Admin@kremlin.ru has been found in thousands of MongoDB databases
The account Admin@kremlin.ru has been found in thousands of MongoDB databases
The account Admin@kremlin.ru has been found in thousands of MongoDB databases

The researcher immediately drew the only possible conclusion [sarcasm] – the Kremlin, through this account, controls the finances of Russian businesses.

However, all these discovered MongoDB databases were set up with default settings, and anyone had read and write access (Create, Read, Update, and Delete).

Regular news about individual data leak cases is promptly published on the channel data leaks.

Source: habr.com

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster