Which honeypots trap malware campaigns and emulate vulnerabilities such as outdated APIs and SMBv1 protocols?

• A. Malware Honeypots
• B. Research Honeypots
• C. Spam Honeypots
• D. Email Honeypots

Answer: (A)

Focusing on luring and studying actual malware behavior, this question is about decoy systems designed to attract malware campaigns by presenting intentionally vulnerable services. Malware honeypots are built to simulate weak or outdated targets—things like old APIs or deprecated protocols such as SMBv1—to entice malware to probe, exploit, and propagate. Once the malware interacts with the honeypot, researchers can observe its techniques, payloads, and command-and-control behavior in a controlled environment, which is exactly what you want when studying how malware campaigns operate.

Other types of honeypots serve different purposes. Research honeypots aim to gather broad attacker behavior and tools over time, not specifically to trap malware campaigns via particular vulnerabilities. Spam honeypots and email honeypots focus on email threats—spam and phishing—rather than network exploits and malware propagation.