Anatomy of a Linux SSH Honeypot Attack: Detailed Analysis of Captured Malware, (Fri, Jun 13th)

Anatomy of a Linux SSH Honeypot Attack: Detailed Analysis of Captured Malware, (Fri, Jun 13th)

[This is a Guest Diary by Michal Ambrozkiewicz, an ISC intern as part of the SANS.edu Bachelor's Degree in Applied Cybersecurity (BACS) program [1].] This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article:… Read more → The post [Guest Diary] Anatomy of a Linux SSH Honeypot Attack: Detailed Analysis of Captured Malware, (Fri, Jun 13th) appeared first on IT Security News.

[Guest Diary] Anatomy of a Linux SSH Honeypot Attack: Detailed Analysis of Captured Malware, (Fri, Jun 13th)

2025年4月29日，Raspberry Pi上的Cowrie SSH honeypot捕获了一次针对Linux系统的复杂攻击。攻击者通过SSH暴力破解成功登录，安装后门并部署了针对不同架构（如ARM7、ARM8、x86_64）的恶意软件。攻击链包括初始访问、持久化机制（如SSH密钥注入和文件不可变属性）、恶意软件分发及清理脚本执行。此次事件揭示了当前自动化攻击的全球协调性和对异构环境的针对性威胁。