Sunday, May 4, 2014

Back To The Game Full Time Mr. Dollar Man

This was the path to a Zbot POST when it came up.


Phishing html page POST to honeyd

Found this in the wild. It was a phishing email that had an html file in it asking for the normal phishing stuff.


The mildly interesting part was that the post message was to a direct IP and had honeyd in the path. Might be some honeynet system that got compromised? Not sure.