Collaborate Disseminate
With all the Russian election hacking scandals in the news during and after the 2016 Presidential election, curiosity consumed me to architect and run an experiment to see if I could monitor changes in the threat landscape in either Moscow, Russia or W… Continue reading Adventures of Cyber Security Monitoring During 2018 U.S. Midterm Elections
I’m tossing an idea around in my mind. I want to bounce it off the community to see if this holds any water.
First – the OWASP guidelines never specify any method of action when you’re dealing with registrations and password… Continue reading Concerning The OWASP Security Guidelines As They Apply To Site Registration / Could honeypotting work?
For research purposes, I am trying to build a farm of small telnet servers as a high interactive honeypots for mirai malware. I am trying to collect all the possible data from these bots before/after they are infected. I am t… Continue reading How to setup a telnet server farm for Mirai botnet?
I am seeing a lot (>50% of total events) of connection events on a honeypot I have set up but there is no further interaction, no brute force, just a connect then disconnect.
I’m thinking this is just some kind of scan to s… Continue reading Honeypot SSH connection attempts with no interaction
A threat actor been spotted on a number of honeypots looking to download and execute malicious cryptomining malware. Continue reading New Threat Actor ‘Rocke’: A Rising Monero Cryptomining Menace
Prenda Law masterminds Paul Hansmeier and John Steele filmed and uploaded the videos, then sued the “John Does” who downloaded them. Continue reading Extortionist lawyer pleads guilty to creating porn honeypot
I’m considering setting up a SSH honeypot listening on port 22 on my production servers. I’m hoping that not getting an immediate Connection refused would slow down potential attackers.
Are there any security issues with t… Continue reading Cowrie as a decoy on production server : is it a good idea?
I was scanning my network (192.168.0.1-100) and I found many IP addresses that are not mine nor known, around 800 of them. I guess it has something to do with the ISP. After scanning the ips with nmap this is the result I get… Continue reading What are all of these IPs addresses? Honeypots?
A friend of mine asked me this recently, and besides the obvious “try with antivirus vendors” I didn’t know what to answer.
He’s been building a pretty large collection of data from a honeynet consisting of multiple nodes ru… Continue reading Is there any interest in purchasing honeypot traffic data?
The concept of “hacking back” opens up a wide range of cyber defense tools to IT and security managers. Lawmakers are interested in new rules that allow for more flexibility with these activities.
The post What Are the Legalities and Implications of ‘Hacking Back’? appeared first on Security Intelligence.
Continue reading What Are the Legalities and Implications of ‘Hacking Back’?