Citigroup, Idaho, and Build-A-Bear Launched a Coordinated Attack on Me
A multinational bank, a US state, and a custom teddy-bear workshop all unwittingly joined the same phone-fraud botnet. Here's how to check whether one of your own machines got caught in the same honeypot.
A rogue machine that can reach my server can also reach the rest of your network, and that is the part that should actually worry you.
- sciencejerk
Thanks for sharing your interesting research! Can you explain your honeypotting approach further? How are you "presenting" as a SIP relay? What other honeypots or protocols can you detect?
- Oarch
Hell of an opening on this blog post. Solid write up! Glad honeypots like this exist.
- richwater
This is quite the claim (and I'm not saying you are wrong from making it).
I just would have expected some of these institutions to be better.