Security Affairs

MAY 4, 2022

The attacks were monitored by cybersecurity firm CrowdStrike, who discovered that the Docker Engine honeypots deployed between February 27 and March 1 were compromised and used in the DDoS attacks. CrowdStrike Intelligence assesses these actors almost certainly compromised the honeypots to support pro-Ukrainian DDoS attacks.

Honeypots 112

Honeypots Military Mining Government 112

Security Affairs

MAY 6, 2022

Uptycs researchers identified ongoing malicious campaigns through our Docker honeypot targeting exposed Docker API. The Uptycs Threat Research team has identified ongoing malicious campaigns through our Docker honeypot targeting exposed Docker API port 2375. Figure 7:honeypot log – crypto miner attack. Figure 8: aaa.sh

Honeypots 76

Honeypots Mining Cybersecurity Security 76

eSecurity Planet

DECEMBER 10, 2021

A critical vulnerability in the open-source logging software Apache Log4j 2 is fueling a chaotic race in the cybersecurity world, with the Apache Software Foundation (ASF) issuing an emergency security update as bad actors searched for vulnerable servers. Anybody using Apache Struts is likely vulnerable. beta9 to 2.14.1.

Risk 135

Risk Libraries Cybersecurity Honeypots 135

Security Affairs

MARCH 19, 2021

Cybersecurity experts warn of ongoing attacks aimed at exploiting a recently patched critical vulnerability in F5 BIG-IP and BIG-IQ networking devices. “Starting this week and especially in the last 24 hours (March 18th, 2021) we have observed multiple exploitation attempts against our honeypot infrastructure.

Honeypots 90

Honeypots Cybersecurity Security Access 90

Security Affairs

NOVEMBER 3, 2019

In May, Microsoft warned users to update their systems to address the remote code execution vulnerability dubbed BlueKeep , A few days later, the National Security Agency (NSA) also urged Windows users and administrators to install security updates to address BlueKeep flaw (aka CVE-2019-0708). They only expose port 3389.

Honeypots 63

Honeypots Security Authentication Information Security 63

Security Affairs

DECEMBER 21, 2021

Uptycs has already shared details about remediation and detection steps for its customers in the previous blog. In this blog post, we will talk about various malware categories that attackers are taking advantage of the Log4j vulnerability. Figure 5: Tsunami running from /dev/shm via cron.

Honeypots 92

Honeypots Ransomware Mining Encryption 92

Security Affairs

MAY 14, 2019

So, I came up with this blog post and this GitHub repository where I proposed a new testing-set based on a modified version of Malware Instruction Set for Behavior-Based Analysis , also referred as MIST. The original post along many other interesting analysis are available on the Marco Ramilli blog: [link].

Artificial Intelligence 69

Artificial Intelligence Computer and Electronics Honeypots Cybersecurity 69