Thinkst Canarytokens lists decoys that alert when touched
Original title: Create a Canarytoken. Deploy it somewhere
The page offers web bugs, cloud credentials, documents, and other tripwires that notify the owner on access.
The Canarytokens site invites users to create a token and deploy it so they are alerted when it is used. Listed types include URL web bugs, DNS names, AWS infrastructure and API keys, credit cards, QR codes, database dumps, documents, kubeconfigs, WireGuard configs, and Azure login material. Alerts are also described for cloned websites, fake apps, Windows folders, and sensitive commands. The page points users to Canarytokens documentation and Thinkst Canary.
- Document tokens include Microsoft Word, Excel, Acrobat Reader PDF, and SVG files.
- Cloud-related tokens cover AWS keys, Azure certificates, Entra ID login, and kubeconfig.
- A listed token alerts when a log4j log line is vulnerable to CVE-2021-44-228, as written on the page.
- Other options include MySQL dumps, Microsoft SQL Server, SVN, and unique email addresses.
From the original article
2 min read at canarytokens.org• Get an alert when an attacker explores your AWS Infrastructure AWS Infra • Get an alert when an attacker attempts to use your credit card. Credit Card • Get an alert when an attacker follows your QR Code. QR code
By canarytokens.org via veqq · canarytokens.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.