https://rdnsec.info/ Malware and hardware security research by Radek Zdonczyk en https://rdnsec.info/articles/skidmap-redis-honeypot/ https://rdnsec.info/articles/skidmap-redis-honeypot/ Sun, 30 Jul 2023 00:00:00 +0000 An unauthenticated Redis instance, a base64 cron job, and a rootkit-equipped cryptominer that ClamAV walked straight past. https://rdnsec.info/articles/global-database-threat-landscape/ https://rdnsec.info/articles/global-database-threat-landscape/ Tue, 13 Jun 2023 00:00:00 +0000 Six countries, nine database engines, four months of data — and one engine absorbing over 93% of every login attempt. https://rdnsec.info/articles/typosquatting-python-repositories/ https://rdnsec.info/articles/typosquatting-python-repositories/ Fri, 13 Dec 2019 00:00:00 +0000 Two PyPI packages impersonated python-dateutil and jellyfish with lookalike names, then quietly harvested SSH and GPG keys from developer machines.