Two years after hacker groups began ransacking MongoDB databases and requesting ransom payments, the practice is still very much alive, ZDNet has learned this week.