Oh man, I fell for one years ago when I was just starting out in pentesting.
Found a "leaked" database dump on a sketchy forum and downloaded it like an idiot.
Turns out it was a honeypot trap with embedded beacons. My IP got logged, and I got a *very* stern email from my ISP.
Lesson learned: always sandbox sketchy downloads. Now I use ANY.RUN or Hybrid Analysis for quick checks.
Found a "leaked" database dump on a sketchy forum and downloaded it like an idiot.
Turns out it was a honeypot trap with embedded beacons. My IP got logged, and I got a *very* stern email from my ISP.
Lesson learned: always sandbox sketchy downloads. Now I use ANY.RUN or Hybrid Analysis for quick checks.