threat-intel
Scans for Solana (Surfpool?) Endpoints, (Mon, Aug 10th)
Medium
Summary
The SANS Internet Storm Center is observing a scanning campaign targeting Solana infrastructure, likely conducted by automated tools. These scans are attempting to enumerate Solana API endpoints and potentially extract credentials, indicating an effort to map the Solana ecosystem and potentially compromise associated services. The scans utilize a proxy to reach the backend API, suggesting a sophisticated reconnaissance operation.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data