Join us for the Honeynet Workshop 2024: May 27th–29th, Copenhagen, Denmark

Ghost USB honeypot released

14 Jun 2012 Sebastian Poeplau ghost usb
I’m very pleased to announce that we have released the first public version of the Ghost USB honeypot. Ghost is a honeypot for malware that uses USB storage devices for propagation. It is able to capture such malware without any further knowledge - especially, it doesn’t need signatures or the like to accomplish its task. Detection is achieved by emulating a USB flash drive on Windows systems and observing the emulated device.