Your Logs Contain a Plea for Assistance In a Packet Bottle and You Likely Never Noticed It

HMEFB: Anatomy of a Belarusian Worm I found this story because of a re-post on Mastodon by Fritz Adalis regarding a suspicious User-Agent by Jason Callahan of SANS’s ISC. He found something odd in his DShield honeypot logs: a URI path that read /?_HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_. In the User-Agent header, an email address: HelpMeEscapeFromBelarus@proton.me. The SANS diary […] The post Your…