Sign in

Topic

Malware

A collection of 6 issues

Running SSH on Port 22 vs 2222

So I host a SSH server Honeypot on my public IP and I thought to myself - How big a difference is running the service on port 22 vs 2222. Is this single step a big enough hurdle to consider it better? And of course, like everything else in my

P2P Botnet PanChan

So in my usual pattern of being curious, I did some more analysis of old malware samples on IDA. First thing that I caught was that it contained a huge (30-25 MB) with a bit chunk of Go Code. This is a bit unusual as most of the malware that

Some malware from my Honeypot

So I've been running my HoneyPot for many months now, and I do analysis on some samples from time to time. Following are 2 interesting scripts. While one is clearly a tool to demonstrate an attack, now being used in the wild, the other one is a simple port scanner

Mirai Botnet in 2021

Following my post [https://blog.prakharshukla.com/honeypot-running-off-a-pi-zero-w-d86a03edc63a] about the HoneyPot, and this port is about one of those attacks. While Mirai is no more the hot news, the most number attacks, albeit I hope mostly useless, start from this simple bot. In fact, this is the list of unique

HoneyPot running off a Pi Zero W

This tiny guy has seen more attacks than Spartans!I had a Pi Zero W lying around my stuff. My original aim was to run a camera on top of it, but it seemed that Pi 3 handled the video processing much better than this tiny guy, so it was

Exploring Old Bitcoin Mining Malware

> This is a repost from my blog at Medium. I was going through some old files when I found a malware I’d decoded while fixing someone’s PC. Back in 2013, someone had asked me to get rid of a virus they had encountered. I formatted the hard drive,