This report provides an analysis of the attacks observed targeting Novetta’s ElasticSearch honeypots, including the malware installed by attackers, the attackers’ tactics, techniques and protocols (TTPs), as well as remediation suggestions for vulnerable ElasticSearch instances.
The Elastic Botnet Report
by Bill Dailey