gregcmartin

Introducing the open model cyber capability benchmark

Thanks for sharing your story Kenneth. Unfortunately it will be a common one... Maintainers of open source projects will be increasingly target by sophisticated hacking teams, sometimes government funded. They will often win but the best thing you can do for yourself and your users is to practice good security hygiene and this story is a perfect example why. Strong random passwords everywhere (no repeated passwords) and 2-factor auth should be the minimum. Thankfully there are plenty of free apps out there that help you manage this process. Nobody can have perfect security but you can easily raise the bar high enough to force an attacker to move elsewhere. Also the Op's password was most likely taken from the recently leaked LinkedIn breach (educated guess).

JASK is an Artificial Intelligence + Cyber Security startup located in Downtown San Francisco.

We are hiring big data and ML engineers! If you love spinning up massive hadoop clusters in AWS and developing streaming complex machine learning algorithms with the goal of protecting the world from cyber criminals and espionage? Well you came to the right place... Amazing team and culture. Top quality benefits. JASK [email protected]

Make sure Elastic Search is not accessible from a public IP address (this is what likely got you in the mess to begin)

The cool thing is you can pair this with Ansible and get 1,000's of honeypots deployed at once. In a proof of concept we deployed nearly dozens using digital ocean API and got blocked by their API creation limits.

If you use more interesting honeypot software like Conpot you can monitor which countries are attacking SCADA systems, etc.

pure awesome, one click deploy 1,000 honeypots using ansible (video coming soon)