Good morning everyone, I’m DD the programmer!
Just read a threat intelligence bulletin from Microstep online, which mentions that Navicat Premium, our widely used database management tool, has been poisoned! If you have used the version, you are probably currently at risk of data leakage.
What’s going on?
According to Microstep, the poisoned version of Navicat Premium originated from a Local download site for MacOS apps: www.macwk.com.
Because Navicat Premium is a paid software, attackers took advantage of users’ demand to search for a cracked version of Navicat Premium and poisoned it.
According to the website, the software has been downloaded 373,128 times!
Navicat Premium has a large user base in China. At the same time, due to the particularity of tools (database connection tools), we must pay attention to the threat of data assets.
At present, the website should also receive relevant risk information, so the software page gives a hint on this risk:
DD recommends that you check today to see if any of your teams are using Navicat Premium, which is distributed from www.macwk.com. If so, uninstall immediately, and change the database account password! In addition, it is worth mentioning that the network security protection for important data can also be grasped, can achieve the minimum range of access better! That way, if something goes wrong with the tool, there is a network strategy to protect against the leak of important data.
Finally, some may ask, Navicat Premium is not secure, so what should I use? Here are a few database tools that DD has used and found to be good:
The first one: Sequal Pro
This is a completely free tool that DD uses all the time. If you don’t want to pay for commercial software, and you don’t want to risk cracking software, this is a good fit.
Website: www.sequelpro.com/
Second: built-in tools for IDEA
If you use IDEA development, the built-in database management tools can also be used directly, quite powerful!
If you haven’t used it yet, you can open it from the menu shown below and see the configuration screen in the right sidebar.
Finally, do a little research. Which tool do you think works best? Comment section!
Welcome to pay attention to my public number: program ape DD. Learn cutting-edge industry news, share in-depth technical know-how, and obtain high-quality learning resources at the first time