Tag: honeypot

2 Attack Reports | 0 Vulnerabilities

Attack reports

ViciousTrap - Infiltrate, Control, Lure: Turning edge devices into honeypots en masse.

A threat actor nicknamed ViciousTrap has compromised over 5,500 edge devices, transforming them into honeypots. The actor targets more than 50 brands of SOHO routers, SSL VPNs, DVRs, and BMC controllers, possibly to collect exploited vulnerabilities. The infection chain involves exploiting CVE-2023…
gobrat
edge devices
soho routers
honeypot
CVE-2023-20118
2025-05-23
netghost
CVE-2021-32030
Published: May 23, 2025
Linked vulnerabilities : CVE-2023-20118, CVE-2021-32030
Downloadable IOCs: 15

CURLing for Crypto on Honeypots

An analysis of honeypot activity reveals a pattern of repeated curl commands targeting various websites, primarily originating from a single IP address. The commands, executed on multiple honeypots, focus on cryptocurrency-related sites, bot construction platforms, and communication services. The a…
cryptocurrency
ddos
botnet
mining
telegram
siem
2024-12-09
curl
honeypot
cowrie
Published: December 9, 2024
Downloadable IOCs: 37
Click here to see more Attack Reports