Threat Actors Leverage Oracle Database Scheduler to Gain Access to Corporate Environments

[rbc]

In recent weeks, security researchers have observed a surge in attacks exploiting Oracle Database Scheduler’s External Jobs feature to gain a foothold in corporate environments.

This technique abuses the scheduler’s ability to execute arbitrary commands on Windows-based database servers, allowing adversaries to bypass perimeter defenses.

Initial intrusion vectors involve probing publicly exposed Oracle listener ports and leveraging misconfigured credentials or default administrative accounts.
[...]
Threat Actors Leverage Oracle Database Scheduler to Gain Access to Corporate Environments