My MongoDB has been extorted by a kraken ransomware virus

I have the same problem.

I pay 2 days ago, but they don’t answer anymore. So don’t waste your money!

I had the same problem because I deployed alpha edition and didn’t care security. I thought no body would know my server but some guy lurked in and asked for some BTC payment. That’s interesting how they knew my server address when it was just created, not in production yet. I ignored the message, set up firewall, limit source ip access, enable MongoDB authentication. So far, the issue hasn’t happened again yet. And one advice for you guys: NEVER PAY MONEY. They don’t care your data, all they want is money. If you pay money, you shot yourself twice.

They are able to access your MongoDB because it is exposed to the internet, ie anyone can access it. I assume that you don’t have a firewall in place to block these connections, if so then you’ll need to remedy this else it’ll continue to happen.

Mongo has some information on how to do this.