This was the path to a Zbot POST when it came up.
Sunday, May 4, 2014
Phishing html page POST to honeyd
Found this in the wild. It was a phishing email that had an html file in it asking for the normal phishing stuff.
The mildly interesting part was that the post message was to a direct IP and had honeyd in the path. Might be some honeynet system that got compromised? Not sure.
The mildly interesting part was that the post message was to a direct IP and had honeyd in the path. Might be some honeynet system that got compromised? Not sure.
Subscribe to:
Posts (Atom)