zlacker

[return to "Clawdbot Renames to Moltbot"]

>>philip+(OP)
Already seeing some of the new Moltbot deployments exposed to the Internet: https://www.shodan.io/search/report?query=http.favicon.hash%...

>>achill+ps
Wasn't aware about this favicon trick, nice :)

>>swah+ue1
FYI we released a tool to calculate a bunch of these types of hashes: https://book.shodan.io/command-line-tools/shodan-hash/

More info about the favicon hashing technique: https://blog.shodan.io/deep-dive-http-favicon/