What we know
An experimental and incomplete alpha-stage program that tracks decoy ('honey pot') files with names, extensions, and paths likely to be encrypted by ransomware, killing processes that lock them when opened.
Evidence limits
The described behavior is based solely on the project's documentation and has not been independently verified; the author itself warns there is no guarantee of full accuracy.
Sources and provenance
- jlchntoz/ransomhoneypot repository
repository-documentation · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.