We chose the word MeTech as the name of the company. The site is made based on a free template. The images are taken from photo banks, using the most unpopular. ones and modified to make them less recognizable.
We wanted the company to feel real, so we had to buy telemarketing data add employees with professional. skills that matched the profile of the business. We came up with names and personalities for them, and then tried to select images from photo banks based on ethnicity.
Indescribably attractive: how we created a pot of honey. that can’t be displayed
Screenshot of the MeTech honeypot website. Source: Trend Micro
To avoid detection, we looked for good-quality. group photos from which to select the necessary faces. However, we later abandoned this option, since a potential hacker could use a reverse. image search and discover that our “employees” only live in photo banks. In the end, we used photos of non-existent people created using neural networks.
The employee profiles posted on how predictive ai designers can help the site contained. important information about their technical skills, but we avoided identifying specific schools or cities.
>We used a hosting provider’s server to create mailboxes. then rented several phone numbers in the US and combined them into a virtual PBX with a voice menu and answering machine.
Honeypot infrastructure
To avoid exposure, we decided to saudi data use a combination of real industrial. hardware, physical computers, and secure virtual machines. Looking ahead, we will say that we verified the result of our efforts using. the Shodan search engine, and it showed that the honeypot looks like a real industrial system.
Indescribably attractive: how we created a pot of honey. that can’t be displayed
The result of a honeypot scan with Shodan. Source: Trend Micro
We used four PLCs as hardware for our trap:
Siemens S7-1200,
two AllenBradley MicroLogix 1100,
Omron CP1L.
These PLCs were chosen because of their popularity. in the global control system market. Indescribably attractive: how we created a pot of honey that can’t be display
Equipment of our “factory” trap. Source: Trend Micro
We didn’t just install hardware and connect it to the internet. We programmed each controller to perform tasks, including
mixing,
burner and conveyor belt control.
Palletizing using a robotic manipulator.
>And to make the production process realistic, we programmed logic to randomly. Change feedback parameters, simulate starting and stopping motors, and turning burners on and off.