Threat Actors Achieve Persistence After SQL Injection

See how a threat actor used SQL injection and BadIIS to gain persistence, disable Windows Defender, and quietly install a cryptominer.