Skip to content

Ghost is a honeypot for malware that uses USB storage devices for propagation.

License

Notifications You must be signed in to change notification settings

mrvirginis/ghost-usb-honeypot

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

87 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

                    README

Ghost is a honeypot for malware that uses USB storage devices
for propagation. It is able to capture such malware without
any further knowledge -- in particular, it doesn't need signatures
or the like to accomplish its task.

Detection is achieved by emulating a USB flash drive on
Windows systems and observing the emulated device. The assumption
is that on an infected machine the malware will eventually
copy itself to the removable device.

See http://code.google.com/p/ghost-usb-honeypot/ for more details.

About

Ghost is a honeypot for malware that uses USB storage devices for propagation.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C 80.7%
  • C# 13.3%
  • Python 4.0%
  • HTML 1.1%
  • Shell 0.4%
  • Smarty 0.3%
  • Other 0.2%