Hackers abused a Microsoft SQL Server to run commands, steal credentials and source code, and move files in a Viva Aerobus-linked attack.