Exposed SQL Servers Targeted for Monero Mining and Remote Access
FortiGuard Labs identified intrusions into internet-facing Microsoft SQL Servers used to deploy cryptocurrency mining software and a remote-access trojan.
FortiGuard Labs identified intrusions into internet-facing Microsoft SQL Servers used to deploy cryptocurrency mining software and a remote-access trojan. Monero (XMR) is trading at ₹46,043 ($488.46), down 8.3% since this brief published. This is an original Token Times brief synthesising 2 outlets (Crypto.news, Bitcoin World), plus live market data, as of Sun, 15 Nov 2026 03:45:01 UTC.
Compromised servers can consume computing resources, host malicious tools and provide attackers with remote control and data-theft capabilities. The campaign highlights the security risk posed by exposed database infrastructure.
- FortiGuard Labs reported intrusions targeting internet-facing Microsoft SQL Servers.
- Attackers installed Monero mining software alongside the Gh0st remote-access trojan.
- Monero trades at $532.93, down 13.04% over seven days.
- The crypto market is broadly lower amid Extreme Fear readings.
FortiGuard Labs has identified a campaign targeting internet-facing Microsoft SQL Servers, according to Crypto.news. The intrusions install 
Monero mining software, while also deploying the Gh0st remote-access trojan on compromised systems.
The two malicious components serve different purposes. Mining software uses the affected server’s computing capacity to mine Monero, while Gh0st RAT is designed to give attackers remote control and enable data theft. Crypto.news did not provide the number of affected servers or the scale of mining activity in its summary.
FortiGuard Labs detailed the operation in a report dated Nov. 12. The available coverage focuses on the use of exposed SQL Server infrastructure rather than offering information about specific vulnerabilities, targeted organizations or the geographic distribution of infections.
Monero was trading at $532.93, down 0.18% over 24 hours and 13.04% over seven days, with a market capitalization of $10.04 billion. The wider crypto market was broadly lower, with total capitalization at $2.33 trillion and 
Bitcoin down 3.21% over 24 hours. The Fear & Greed index stood at 13, indicating Extreme Fear.
The report illustrates how exposed server infrastructure can support both unauthorized cryptocurrency mining and broader cyberespionage. Relevant indicators for monitoring include changes in server resource usage, signs of Gh0st RAT activity and any further disclosure by FortiGuard Labs about the campaign’s scope.
Since this brief published about 16 hours ago, Monero (XMR) has moved from ₹50,235.09$532.93 to ₹46,043.25$488.46 — -8.34%, a notable move.
The chart plots XMR's price: grey is the move before this brief published, the vertical dashed line marks the moment it published, the horizontal dashed line is the price then, and the coloured area is the move since — from Token Times's market data (daily resolution). It shows what happened after the news, not that the news caused it; many factors move prices. Not financial advice.
At today's peer-to-peer rate, 1 XMR ≈ ₹51,134.44 (about $488.46), down 6.8% over 24 hours. The rupee itself trades about 11.1% above the official rate on the P2P market, so a Indian buyer's effective cost differs from the headline dollar price.
Live market data
Current prices for the asset in this story — live, source-stamped, updated every 15 minutes.
Figures and sectors in this story, checked live against on-chain aggregators · November 14, 2026.
Token Times reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.
Exposed SQL Servers Targeted for Monero Mining and Remote Ac — questions & answers
What did FortiGuard Labs discover?
FortiGuard Labs identified a campaign compromising internet-facing Microsoft SQL Servers to install Monero mining software and the Gh0st remote-access trojan.
What does Gh0st RAT add to the campaign?
Gh0st RAT provides remote control over compromised machines and can support data theft, extending the threat beyond unauthorized mining.
How is Monero performing amid the campaign?
Monero is priced at $532.93, down 0.18% over 24 hours and 13.04% over seven days.
How much is 1 Monero worth in rupee today?
About ₹51,134.44 at the live peer-to-peer (P2P) USDT rate, which is what Indians typically trade at — equivalent to roughly $488.46. The rupee price moves with both XMR's US-dollar price and the USDT/INR rate; use our Monero in rupee page for any amount.
Has Monero's price moved since this brief was published?
XMR is down 8.34% since this brief first published — trading at ₹46,043 ($488.46) now versus ₹50,235 ($532.93) at publication. Token Times re-checks this figure against CoinGecko and Binance every 15 minutes.
Which outlets reported this story?
This is an original Token Times brief that synthesises reporting from Crypto.news, Bitcoin World, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.