File names, Honeypots, IT and Mining - Information Management Today

Multiple threat actors are targeting Elasticsearch Clusters

Security Affairs

FEBRUARY 27, 2019

Cisco Talos experts have reported a spike in the attacks that leverage known flaws to compromise unsecured Elasticsearch clusters and use them to mine crypto-currencies. “Through ongoing analysis of honeypot traffic, Talos detected an increase in attacks targeting unsecured Elasticsearch clusters. .”

Search queries

Search queries Honeypots File names Mining

Outlaw is Back, a New Crypto-Botnet Targets European Organizations

Security Affairs

APRIL 28, 2020

The parent folder is an hidden directory named “. rsync ”, it includes three files and three sub-directories. The initial files are “ init ”, “ init2 ” and “ initall ”. The first component that is executed is “ initall ”, its body is the following: Figure 3: Content of the initall” file.

Mining

Mining File names Honeypots IT

Information Management Today

Multiple threat actors are targeting Elasticsearch Clusters

Outlaw is Back, a New Crypto-Botnet Targets European Organizations

Webinars

Stay Connected