Guardicore's security research team publishes analyses of botnets, ransomware, and vulnerabilities in data center and cloud software.
HN links it as the primary technical source for attack write-ups like the MySQL ransomware; one commenter is skeptical of its automated pentesting tool claims.
I'm always slightly dubious of full automated penetration testing tools, particulary ones that state things like
"It is non-intrusive, with no impact on your network." (from https://www.guardicore.com/infectionmonkey/)
Having a quick look at the site some of the modules it can use are brute-force password guessers which could cause account lockouts quite easily, depending on how they're used.
Also in my moderately long experience of pentesting (~15 years) even quite innocuous seeming actions can negatively impact systems under review (I've knocked over whole networks with standard port scanning, taken out a website with a ' character in a login box, seen another website taken out by being spidered etc)
This isn't to knock this tool in particular, just expressing a general wariness of tooling which claims to be able to fully automate a process and do so with zero risk.
GuardiCore | (Senior) Software Developer | Tel Aviv, Israel | ONSITE, Full Time
We develop a unique security product for large data centers, which does best of class breach detection, network visibility and micro segmentation.
Our product is written in Python where possible, C in both user mode and kernel (Linux and Windows).
Come work with a growing team of bright developers, and solve hard problems on a day to day basis.
If this interests you - contact me at yuri@guardicore.com or visit our careers page https://www.guardicore.com/company/careers/
If this is the type of thing that interests you, it's worth pointing out that Guardicore is hiring a team lead to manage the open source project:
https://www.guardicore.com/company/careers/?id=AE.71F
Here is the source of all these articles with actual technical info on the attack:
https://www.guardicore.com/labs/please-read-me-opportunistic-ransomware-devastating-mysql-servers/