Re:Inside Shellshock: How hackers are using it to exploit sy...
by jgrahamc on Wednesday October 01, 2014 @03:52AM
(#8393273)
Understood. I based the claim that it was mostly reconnaissance right now on the fact that 83% of all the requests we were seeing were reconnaissance and not dropping malware. But, I agree, there is a lot of malware being dropped as well.
[ Parent
| on HN ]
Re:Inside Shellshock: How hackers are using it to exploit sy...
by meowface on Thursday October 02, 2014 @07:51PM
(#8403754)
My organization has mostly been seeing more reconnaissance than actual code execution as well. I suspect, or perhaps just hope, that this is because most of the current scanning is being done by white hats/gray hats. I suspect the people who actually want to infect machines aren't bothering with reconnaissance.