HiveCmd.jar Malicious Java Add-on
A malicious Java user-defined function (UDF) for Apache Hive that allows remote code execution on HiveServer2. The attacker deployed it against the…
Tag: HiveServer2
Apache HiveServer2 SQL Interface
The SQL front-end for Apache Hadoop clusters. It was targeted by the attacker using a script that exploited the default NONE authentication…
Hacker Deploys Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
An attacker installed the open-source Hermes AI assistant on a rented server, disabled its permission-requesting YOLO mode, and directed it at Thailand's…
Apache Software Foundation
The organization behind Apache Hadoop and HiveServer2, which were targeted in the attack. The default NONE authentication mode in HiveServer2 was exploited.