ZHtrap Botnet Implements Honeypot to Facilitate Finding More Infected Victims
released on 2021-03-12 @ 08:22:23 PM
Recently, 360 NetLab came across a botnet that uses a honeypot to harvest other infected devices. From February 28, 2021, the 360 Netlab BotMon system started to see an IP continuously spreading a batch of unknown ELF samples. After analysis, 360 Netlab confirmed that these samples belonged to a new botnet family that 360 Netlab has named ZHtrap.