Recon-Only SSH Attack Leaves No Malware but Signals a Second-Stage Intrusion

Recon-only activity on SSH is not harmless background noise. A recent honeypot session shows an automated Go-based bot logging in as root, exhaustively grading host hardware for cryptomining suitability, then exiting without dropping a single binary. Cowrie, which exposes a realistic fake Linux shell and records full command transcripts, logged a connection from 91.92.40.13 that […] The post Recon-Only SSH Attack Leaves No Malware but Signals a Second-Stage Intrusion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

First seen on gbhackers.com

Jump to article: gbhackers.com/recon-only-ssh-attack/