The SANS ISC warns of a botnet called Polycon which may manipulate VOIP phones & their Auto-configuration File settings (CFG) https://isc.sans.edu/forums/diary/New+Scans+for+Polycom+Autoconfiguration+Files/25366/ One of my honeypots detected a bot looking for Polycom master provisioning files. Such files are called by default ‘000000000000.cfg’ and contain interesting information to perform provisioning of VoIP phones. Normally, this file is […]