Analyzing Adversary’s Attack on Ethereum Collected from Honeypots

Abstract

With the increasing reliance on digital infrastructure and the transmission of sensitive information online, the necessity for robust cybersecurity measures has become urgent. This research paper explores the effectiveness of employing honeypots and the MITRE ATT&CK framework to detect adversary behaviors in the context of email and cryptocurrency attacks. Through the deployment of honeypots, a diverse range of attack data was captured, enabling the identification of recurring patterns such as phishing and scamming in email, as well as account hijacking in cryptocurrency. By mapping this data to the MITRE ATT&CK framework, we were able to identify the Tactics, Techniques, and Procedures (TTP) utilized by adversaries, which can guide security strategies and mitigate future attacks. Our analysis underscores the value of honeypots in detecting and analyzing adversaries’ TTP, emphasizing the need for ongoing research to enhance our comprehension of emerging threats.