Who Stole My 100,000 Dollars’ Worth Bitcoin Wallets - Story of HoneyTokens
summary
Describes a 90-day experiment that plants 10 Testnet wallets worth about $100,000 in total (Testnet coins) inside bait zip files and watches who steals them. Uses the open source Honeybag Python tool to build zip archives that include crafted desktop.ini and .url files to force external icon lookups, a simple DNS logger and RESPONDER to collect hostnames, usernames, IPs and NTLMv2 hashes. All 10 zips are exfiltrated; nine return actionable identifiers and one yields no alert (likely non‑Windows).
AI-written summary · about
chapters (4)
related talks
34mWho Goes There? Detecting Intruders With Honeytokens
32mData Heist: How Stolen Information Becomes a Hot Commodity
57mWhat we can learn from the World's Biggest Heists
51mMoney Doesn't Stink - Cybercriminal Business Insight of A New Android Botnet
15mTales from the Underground: Hilarious Cybercrime Fails!!
33mHacked on National Television
24mAll Your Money Belongs to Us (Me)
01h 01mPrincess of Thieves: How I Robbed 30 Banks