Hal Pomeranz (@hal_pomeranz): "For those of you who are looking for more of my Linux honeypot analysis, Part 3 & 4 will be appearing this coming Mon/Tue (Dec 27&28). In the meantime, get started with https://righteousit.wordpress.com/2021/12/20/hudaks-honeypot-part-1/ and https://righteousit.wordpress.com/2021/12/21/hudaks-honeypot-part-2/" | nitter

Hal Pomeranz @hal_pomeranz

24 Dec 2021

For those of you who are looking for more of my Linux honeypot analysis, Part 3 & 4 will be appearing this coming Mon/Tue (Dec 27&28). In the meantime, get started with righteousit.wordpress.com/20… and righteousit.wordpress.com/20…

Hudak’s Honeypot (Part 2)

This is Part 2 in a series. Part 1 is here. During my triage I noticed a suspicious file /var/tmp/dk86. It’s a 64-bit Linux ELF executable, owned by user “daemon”, created 2021-11…

righteousit.wordpress.com

Dec 24, 2021 · 1:15 AM UTC

1

13

1

35

Tim Brown @timb_machine

24 Dec 2021

Replying to @hal_pomeranz

Ah, neat. Looking forwards, be interesting to compare and contrast.