Elons (Proxima/Black Shadow related) ransomware attack via Oracle DBS External Jobs – YLabs

Threat actors exploited an exposed Oracle DBS Job Scheduler to gain initial access, establish an encrypted tunnel, escalate privileges, and deploy a new "Elons" ransomware variant (linked to Proxima/Black Shadow), ultimately encrypting the victim's server and leaving minimal forensic traces.