The sophisticated attacks, tracked as DB#JAMMER, run shell commands to impair defenses and deploy tools to establish persistence on the host.
Source: DarkReading
Source Link: https://www.darkreading.com/attacks-breaches/mssql-databases-under-fire-from-freeworld-ransomware