2025 Q4 Windows Database Server Malware Statistics Report – ASEC

In Q4 2025, attacks targeting Windows MS-SQL and MySQL servers surged, with threat actors—most notably Trigona—leveraging brute-force techniques, remote access tools, and a diverse arsenal of malware to hijack systems, deploy ransomware, and monetize compromised resources.