Skip to content
Threat Feed
Subscribe

Actor

CL-STA-0048

1 brief RSS
medium threat

Abuse of Microsoft SQLCMD Utility for Database Exfiltration

Threat actors like CL-STA-0048 abuse the legitimate sqlcmd.exe utility to conduct database reconnaissance, data theft, and unauthorized command execution on compromised Microsoft SQL Server instances.

SQL Server CL-STA-0048 database-security process-abuse data-exfiltration
2t