so.cl

Rascals are always sociable, and the chief sign that a man has any nobility in his character is the little pleasure he takes in others company. Arthur Schopenhauer


Analysis of Amadey Bot Infrastructure Using Shodan

Analysing a suspicious ip address found in my previous post on Amadey Bot Malware. Utilising Shodan and Censys to pivot to additional Amadey infrastructure.

Here you’ll see how to use a known c2 to craft additional queries based on html content and certificate information. In total, 12 unique servers will be identified. Analysis of Amadey Bot Infrastructure Using Shodan

May 25, 2023
#security ▪ #malware