The Digital Cockroach Bait Station: Building Spam Honeypots
Robert Simmons explains how to construct high-volume spam honeypots to capture live malware binaries, track bulletproof hosts, and harvest threat intel.
Summary
The Value of Spam Traps for Malware Collection
Spam honeypots remain one of the most effective and cost-efficient mechanisms for gathering zero-day malware binaries and monitoring active exploit campaigns.
Designing the Spam Bait Architecture
Robert Simmons details configuring MX mail relays, seeding harvested email addresses across open forums, and automating payload extraction.
Extracting Threat Intelligence and Campaign Artifacts
Simmons demonstrates analyzing malicious attachment metadata, tracking bulletproof hosting infrastructure, and clustering malware distribution networks.
Automating Ingestion and Threat Scoring
The presentation provides open-source processing scripts to score incoming spam attachments and ingest indicators into threat intelligence platforms.
Related talks
Main Stage·19 min
Ionut Cernica
Ionut Cernica analyzes automated hacker tooling and exploit scripts, demonstrating how predictable exploit traffic leaks target data to network eavesdroppers over TLS.
Village Presentations·37 min
Elliot Brink
Elliot Brink analyzes over one year of telemetry from a globally distributed honeypot sensor network, tracking automated botnet propagation and brute-force trends.
Briefings·41 min
Estelle Ruellan · Olivier Bilodeau
Threat analysts uncover operational security blunders and digital breadcrumbs left by state-sponsored threat actors during cyber heists.