Poorly Secured Databases Targeted by 'Gh0stCringe' Backdoor

The malware comes with a keylogger that if activated stores user input in the Default.key file in the Windows System directory. It can also collect Windows system and security product information that is sent on to the C2 server.