helgesver
Trial run of a Livewire honeypot I built earlier this month. About 60 hours after deploy, an Indonesian operator ran Livepyre against it. The dropper pointed at xantibot[.]pw โ an undocumented C2 that has been operating since February 2026.
helgesver.re