Security researcher Didier Stevens setup a trap, or in digital security terms – a “honeypot”. Think of it as digital sting operation, where someone puts a server online open to attack – but nothing of value is really there, it’s only there to record the attacks as they happen.
The logs of these honeypots revealed hackers running scrips aimed at detecting files that contain cryptocurrency wallets.
The filenames included:
wallet – Copy.dat
wallet.dat
wallet.dat.1
wallet.dat.zip
wallet.tar
wallet.tar.gz
wallet.zip
wallet_backup.dat
wallet_backup.dat.1
wallet_backup.dat.zip
wallet_backup.zip
Didier said he’s seen activity like this since 2013 – but never at such high volume.
Read more…
Source: Global Crypto Press