3 ms·
the point wasnt whether or not they could or did. the point was that it could be inferred based on what sql client the malware client was using without ever to
by stevehawk 6y ago
the point wasnt whether or not they could or did. the point was that it could be inferred based on what sql client the malware client was using without ever touching the sever.
- FDSGSG 6y agoIt is extraordinarily unlikely that the malware would ship with a mysql client or talk mysql with the C2 If it does, that's an easy claim to prove.