DShield (Cowrie) Honeypot Stats and When Sessions Disconnect, (Mon, Mar 30th)
2026-03-30T01:23:49Z•78d0e17c03a91febc4cf6e052a66d605293a8b6eb8cba9ab544fe48c68d87650
apple-patcharechclient2cowriedshieldeclypsiumhoneypotiosip-kvmliteLLMmacosnetsupportpyPIransomwareremcossectopsmartapesgstealcsupply-chainsupply-chain-campaignteampcptelnyxthreat-intelvectvulnerability-patching
What happened
Collection of ISC SANS diary items (Mar 24–30, 2026) covering: ongoing TeamPCP supply-chain campaign updates (multiple updates describing PyPI compromises including LiteLLM and Telnyx supply-chain abuse, a Vect ransomware partnership/affiliate monetization phase, and operational developments through Mar 28); Apple’s March 2026 security updates (≈85 vulnerabilities patched across recent macOS and iOS/iPadOS releases; no in-the-wild exploitation reported); SmartApeSG malware campaign distributing Remcos RAT, NetSupport RAT, StealC, and Sectop (ArechClient2); analysis of DShield/Cowrie honeypot/s
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 78d0e17c03a91febc4cf6e052a66d605293a8b6eb8cba9ab544fe48c68d87650
- Enrichment time
- 2026-03-30T01:23:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.