Unfortunately, the infamous 123456 password is present.
The GhostShell normally used SQL injections to compromise databases and steal records.
However, it is not known they used the same method in the current spate of hackings.
source: www.techworm.net