- Honeygain is a connection-sharing application that allows users to sell their own internet connection to share with Honeygain in return for money. This application utilizes your IP/Network for network sharing thus opening your network to the internet. This application poses a multitude of security risks as your data is not only 'stolen' and shared but your IP/Network is shared and utilized by others. Users reported having their IP banned from some of their applications such as steam as malicious actors utilize the network sharing portion of Honeygain to perform brute force attacks on applications to circumvent an IP ban. This application can be bundled with 3rd party applications and even used in Malware to allow threat actors/ app creators to profit off the downloader's internet access.
- Port 443 TLS
Known False Positive Indicators
MALWARE Observed Honeygain Domain (api .honeygain .com in TLS SNI)