A Random Filename, Six Years of Infection
A Random Filename, Six Years of Infection Four files in my honeypot’s sample directory were exactly 4,766 bytes each. Same size, four different dates across June and July, four different SHA-256 hashes. The file command called all of them data. Not text, not ELF, nothing it could name. They contain the same payload, byte for byte. Eight bytes separate them, and those eight bytes have nothing to do with the malware. ...