PDA

View Full Version : Canary Tokens - A clever set and forget honeypot



SBD4
28th August 2021, 11:22 AM
This is a fantastic tool to help detect security breaches of computers/networks.

When a hacker gets into a network / computer their primary goal is to get information that is going to help them to penetrate the network further and ultimately get some form of payload. They will typically do this by investigating "interesting" files and links found on a computer.

This service generates different types "tokens" (files/links etc) that can be placed various locations on your computers/networks that will be tempting for a hacker to follow and when they do a notification is sent to the person who set them up. If you get such a notification, you know 100% you have a breach. They are a set and forget.

Completely free: Canarytokens (https://canarytokens.org/)

A little bit about it:

https://youtu.be/gnajUKkYy5U

Pedro_The_Swift
28th August 2021, 07:23 PM
WOW!!

I've just loaded a boxfull into my old game save files... [bigrolf]

NavyDiver
29th August 2021, 11:23 AM
I think Microsoft might need a truck load[bigwhistle]

"Aug 28 (Reuters) - Researchers who discovered a massive flaw in the main databases stored in Microsoft Corp's (MSFT.O) (https://www.reuters.com/companies/MSFT.O) Azure cloud platform on Saturday urged all users to change their digital access keys, not just the 3,300 it notified this week.
As first reported by Reuters (https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26), researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital keys for most users of the Cosmos DB database system, allowing them to steal, change or delete millions of records. read more (https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26/)

"